ReactOS  0.4.11-dev-433-g473ca91
winternl.h File Reference
#include <ntdef.h>
#include <windef.h>
Include dependency graph for winternl.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes

struct  _STRING
 
struct  _UNICODE_STRING
 
struct  _FILETIME
 
struct  _TIME_FIELDS
 
struct  _RTL_TIME_ZONE_INFORMATION
 
struct  _RTL_TIME_DYNAMIC_ZONE_INFORMATION
 
struct  _CLIENT_ID
 
struct  _CURDIR
 
struct  RTL_DRIVE_LETTER_CURDIR
 
struct  tagRTL_BITMAP
 
struct  tagRTL_BITMAP_RUN
 
struct  _RTL_USER_PROCESS_PARAMETERS
 
struct  _PEB_LDR_DATA
 
struct  _GDI_TEB_BATCH
 
struct  _RTL_ACTIVATION_CONTEXT_STACK_FRAME
 
struct  _ACTIVATION_CONTEXT_STACK
 
struct  _TEB_ACTIVE_FRAME_CONTEXT
 
struct  _TEB_ACTIVE_FRAME_CONTEXT_EX
 
struct  _TEB_ACTIVE_FRAME
 
struct  _TEB_ACTIVE_FRAME_EX
 
struct  _PEB
 
struct  _TEB
 
struct  _FILE_DIRECTORY_INFORMATION
 
struct  _FILE_FULL_DIRECTORY_INFORMATION
 
struct  _FILE_ID_FULL_DIRECTORY_INFORMATION
 
struct  _FILE_BOTH_DIRECTORY_INFORMATION
 
struct  _FILE_ID_BOTH_DIRECTORY_INFORMATION
 
struct  _FILE_ID_GLOBAL_TX_DIR_INFORMATION
 
struct  _FILE_BASIC_INFORMATION
 
struct  _FILE_STANDARD_INFORMATION
 
struct  _FILE_INTERNAL_INFORMATION
 
struct  _FILE_ID_128
 
struct  _FILE_ID_INFORMATION
 
struct  _FILE_EA_INFORMATION
 
struct  _FILE_ACCESS_INFORMATION
 
struct  _FILE_NAME_INFORMATION
 
struct  _FILE_RENAME_INFORMATION
 
struct  _FILE_LINK_INFORMATION
 
struct  _FILE_NAMES_INFORMATION
 
struct  _FILE_DISPOSITION_INFORMATION
 
struct  _FILE_POSITION_INFORMATION
 
struct  _FILE_ALIGNMENT_INFORMATION
 
struct  _FILE_ALLOCATION_INFORMATION
 
struct  _FILE_END_OF_FILE_INFORMATION
 
struct  _FILE_NETWORK_OPEN_INFORMATION
 
struct  _FILE_FULL_EA_INFORMATION
 
struct  _FILE_MODE_INFORMATION
 
struct  _FILE_STREAM_INFORMATION
 
struct  _FILE_ATTRIBUTE_TAG_INFORMATION
 
struct  _FILE_MAILSLOT_QUERY_INFORMATION
 
struct  _FILE_MAILSLOT_SET_INFORMATION
 
struct  _FILE_PIPE_INFORMATION
 
struct  _FILE_PIPE_LOCAL_INFORMATION
 
struct  _FILE_OBJECTID_INFORMATION
 
struct  _FILE_QUOTA_INFORMATION
 
struct  _FILE_REPARSE_POINT_INFORMATION
 
struct  _FILE_ALL_INFORMATION
 
struct  _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
struct  _THREAD_BASIC_INFORMATION
 
struct  _THREAD_DESCRIPTOR_INFORMATION
 
struct  _KERNEL_USER_TIMES
 
struct  _MEMORY_SECTION_NAME
 
struct  _MUTANT_BASIC_INFORMATION
 
struct  _TIMER_BASIC_INFORMATION
 
struct  _SYSTEM_THREAD_INFORMATION
 
struct  _IO_STATUS_BLOCK
 
struct  _KEY_BASIC_INFORMATION
 
struct  _KEY_NODE_INFORMATION
 
struct  _KEY_FULL_INFORMATION
 
struct  _KEY_NAME_INFORMATION
 
struct  _KEY_CACHED_INFORMATION
 
struct  _KEY_VALUE_ENTRY
 
struct  _KEY_VALUE_BASIC_INFORMATION
 
struct  _KEY_VALUE_FULL_INFORMATION
 
struct  _KEY_VALUE_PARTIAL_INFORMATION
 
struct  _OBJECT_ATTRIBUTES
 
struct  _OBJECT_DATA_INFORMATION
 
struct  _OBJECT_BASIC_INFORMATION
 
struct  _OBJECT_NAME_INFORMATION
 
struct  __OBJECT_TYPE_INFORMATION
 
struct  _OBJECT_TYPES_INFORMATION
 
struct  _PROCESS_BASIC_INFORMATION
 
struct  _PROCESS_PRIORITY_CLASS
 
struct  _RTL_HEAP_DEFINITION
 
struct  _RTL_RWLOCK
 
struct  _SYSTEM_BASIC_INFORMATION
 
struct  _SYSTEM_CPU_INFORMATION
 
struct  _SYSTEM_PERFORMANCE_INFORMATION
 
struct  _SYSTEM_TIMEOFDAY_INFORMATION
 
struct  _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
struct  _SYSTEM_DRIVER_INFORMATION
 
struct  _SYSTEM_HANDLE_ENTRY
 
struct  _SYSTEM_HANDLE_INFORMATION
 
struct  _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
struct  _SYSTEM_HANDLE_INFORMATION_EX
 
struct  _SYSTEM_CACHE_INFORMATION
 
struct  _SYSTEM_INTERRUPT_INFORMATION
 
struct  _SYSTEM_CONFIGURATION_INFO
 
struct  _SYSTEM_EXCEPTION_INFORMATION
 
struct  _SYSTEM_LOOKASIDE_INFORMATION
 
struct  _SYSTEM_KERNEL_DEBUGGER_INFORMATION
 
struct  _VM_COUNTERS_
 
struct  _SYSTEM_PROCESS_INFORMATION
 
struct  _SYSTEM_REGISTRY_QUOTA_INFORMATION
 
struct  _SYSTEM_TIME_ADJUSTMENT
 
struct  _WINSTATIONINFORMATIONW
 
struct  _LDR_RESOURCE_INFO
 
struct  _DEBUG_BUFFER
 
struct  _DEBUG_MODULE_INFORMATION
 
struct  _DEBUG_HEAP_INFORMATION
 
struct  _DEBUG_LOCK_INFORMATION
 
struct  _PORT_MESSAGE_HEADER
 
struct  _ATOM_BASIC_INFORMATION
 
struct  _RTL_HANDLE
 
struct  _RTL_HANDLE_TABLE
 
struct  _RTL_QUERY_REGISTRY_TABLE
 
struct  _KEY_MULTIPLE_VALUE_INFORMATION
 
struct  _EVENT_BASIC_INFORMATION
 
struct  _SEMAPHORE_BASIC_INFORMATION
 
struct  _SECTION_BASIC_INFORMATION
 
struct  _SECTION_IMAGE_INFORMATION
 
struct  _LPC_SECTION_WRITE
 
struct  _LPC_SECTION_READ
 
struct  _LPC_MESSAGE
 
struct  _RTL_USER_PROCESS_INFORMATION
 
struct  _DIRECTORY_BASIC_INFORMATION
 
struct  _INITIAL_TEB
 
struct  _FILE_COMPLETION_INFORMATION
 
struct  _LDR_MODULE
 
struct  _LDR_DLL_LOADED_NOTIFICATION_DATA
 
struct  _LDR_DLL_UNLOADED_NOTIFICATION_DATA
 
union  _LDR_DLL_NOTIFICATION_DATA
 
struct  _SYSTEM_MODULE
 
struct  _SYSTEM_MODULE_INFORMATION
 

Macros

#define WINE_NTSTATUS_DECLARED
 
#define __STRING_DEFINED__
 
#define __UNICODE_STRING_DEFINED__
 
#define _FILETIME_
 
#define PROCESS_PARAMS_FLAG_NORMALIZED   1
 
#define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED   0x00000001
 
#define TEB_ACTIVE_FRAME_FLAG_EXTENDED   0x00000001
 
#define FILE_PIPE_DISCONNECTED_STATE   0x01
 
#define FILE_PIPE_LISTENING_STATE   0x02
 
#define FILE_PIPE_CONNECTED_STATE   0x03
 
#define FILE_PIPE_CLOSING_STATE   0x04
 
#define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS   0x1
 
#define FILE_SKIP_SET_EVENT_ON_HANDLE   0x2
 
#define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO   0x4
 
#define MEM_EXECUTE_OPTION_DISABLE   0x01
 
#define MEM_EXECUTE_OPTION_ENABLE   0x02
 
#define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION   0x04
 
#define MEM_EXECUTE_OPTION_PERMANENT   0x08
 
#define __OBJECT_ATTRIBUTES_DEFINED__
 
#define PROCESS_PRIOCLASS_IDLE   1
 
#define PROCESS_PRIOCLASS_NORMAL   2
 
#define PROCESS_PRIOCLASS_HIGH   3
 
#define PROCESS_PRIOCLASS_REALTIME   4
 
#define PROCESS_PRIOCLASS_BELOW_NORMAL   5
 
#define PROCESS_PRIOCLASS_ABOVE_NORMAL   6
 
#define CPU_FEATURE_VME   0x00000005 /* Virtual 86 Mode Extensions */
 
#define CPU_FEATURE_TSC   0x00000002 /* Time Stamp Counter available */
 
#define CPU_FEATURE_CMOV   0x00000008 /* Conditional Move instruction*/
 
#define CPU_FEATURE_PGE   0x00000014 /* Page table Entry Global bit */
 
#define CPU_FEATURE_PSE   0x00000024 /* Page Size Extension */
 
#define CPU_FEATURE_MTRR   0x00000040 /* Memory Type Range Registers */
 
#define CPU_FEATURE_CX8   0x00000080 /* Compare and eXchange 8 byte instr. */
 
#define CPU_FEATURE_MMX   0x00000100 /* Multi Media eXtensions */
 
#define CPU_FEATURE_X86   0x00000200 /* seems to be always ON, on the '86 */
 
#define CPU_FEATURE_PAT   0x00000400 /* Page Attribute Table */
 
#define CPU_FEATURE_FXSR   0x00000800 /* FXSAVE and FXSTORE instructions */
 
#define CPU_FEATURE_SEP   0x00001000 /* SYSENTER and SYSEXIT instructions */
 
#define CPU_FEATURE_SSE   0x00002000 /* SSE extensions (ext. MMX) */
 
#define CPU_FEATURE_3DNOW   0x00004000 /* 3DNOW instructions available */
 
#define CPU_FEATURE_SSE2   0x00010000 /* SSE2 extensions (XMMI64) */
 
#define CPU_FEATURE_DS   0x00020000 /* Debug Store */
 
#define CPU_FEATURE_HTT   0x00040000 /* Hyper Threading Technology */
 
#define PDI_MODULES   0x01
 
#define PDI_BACKTRACE   0x02
 
#define PDI_HEAPS   0x04
 
#define PDI_HEAP_TAGS   0x08
 
#define PDI_HEAP_BLOCKS   0x10
 
#define PDI_LOCKS   0x20
 
#define FILE_DIRECTORY_FILE   0x00000001
 
#define FILE_WRITE_THROUGH   0x00000002
 
#define FILE_SEQUENTIAL_ONLY   0x00000004
 
#define FILE_NO_INTERMEDIATE_BUFFERING   0x00000008
 
#define FILE_SYNCHRONOUS_IO_ALERT   0x00000010
 
#define FILE_SYNCHRONOUS_IO_NONALERT   0x00000020
 
#define FILE_NON_DIRECTORY_FILE   0x00000040
 
#define FILE_CREATE_TREE_CONNECTION   0x00000080
 
#define FILE_COMPLETE_IF_OPLOCKED   0x00000100
 
#define FILE_NO_EA_KNOWLEDGE   0x00000200
 
#define FILE_OPEN_FOR_RECOVERY   0x00000400
 
#define FILE_RANDOM_ACCESS   0x00000800
 
#define FILE_DELETE_ON_CLOSE   0x00001000
 
#define FILE_OPEN_BY_FILE_ID   0x00002000
 
#define FILE_OPEN_FOR_BACKUP_INTENT   0x00004000
 
#define FILE_NO_COMPRESSION   0x00008000
 
#define FILE_RESERVE_OPFILTER   0x00100000
 
#define FILE_TRANSACTED_MODE   0x00200000
 
#define FILE_OPEN_OFFLINE_FILE   0x00400000
 
#define FILE_OPEN_FOR_FREE_SPACE_QUERY   0x00800000
 
#define FILE_ATTRIBUTE_VALID_FLAGS   0x00007fb7
 
#define FILE_ATTRIBUTE_VALID_SET_FLAGS   0x000031a7
 
#define FILE_SUPERSEDED   0
 
#define FILE_OPENED   1
 
#define FILE_CREATED   2
 
#define FILE_OVERWRITTEN   3
 
#define FILE_EXISTS   4
 
#define FILE_DOES_NOT_EXIST   5
 
#define FILE_SUPERSEDE   0
 
#define FILE_OPEN   1
 
#define FILE_CREATE   2
 
#define FILE_OPEN_IF   3
 
#define FILE_OVERWRITE   4
 
#define FILE_OVERWRITE_IF   5
 
#define FILE_MAXIMUM_DISPOSITION   5
 
#define FILE_REMOVABLE_MEDIA   0x00000001
 
#define FILE_READ_ONLY_DEVICE   0x00000002
 
#define FILE_FLOPPY_DISKETTE   0x00000004
 
#define FILE_WRITE_ONE_MEDIA   0x00000008
 
#define FILE_REMOTE_DEVICE   0x00000010
 
#define FILE_DEVICE_IS_MOUNTED   0x00000020
 
#define FILE_VIRTUAL_VOLUME   0x00000040
 
#define FILE_AUTOGENERATED_DEVICE_NAME   0x00000080
 
#define FILE_DEVICE_SECURE_OPEN   0x00000100
 
#define FILE_CHARACTERISTIC_PNP_DEVICE   0x00000800
 
#define FILE_CHARACTERISTIC_TS_DEVICE   0x00001000
 
#define FILE_CHARACTERISTIC_WEBDAV_DEVICE   0x00002000
 
#define FILE_CHARACTERISTIC_CSV   0x00010000
 
#define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL   0x00020000
 
#define FILE_PORTABLE_DEVICE   0x00040000
 
#define FILE_PIPE_INBOUND   0x00000000
 
#define FILE_PIPE_OUTBOUND   0x00000001
 
#define FILE_PIPE_FULL_DUPLEX   0x00000002
 
#define FILE_PIPE_TYPE_MESSAGE   0x00000001
 
#define FILE_PIPE_TYPE_BYTE   0x00000000
 
#define FILE_PIPE_MESSAGE_MODE   0x00000001
 
#define FILE_PIPE_BYTE_STREAM_MODE   0x00000000
 
#define FILE_PIPE_COMPLETE_OPERATION   0x00000001
 
#define FILE_PIPE_QUEUE_OPERATION   0x00000000
 
#define FILE_PIPE_SERVER_END   0x00000001
 
#define FILE_PIPE_CLIENT_END   0x00000000
 
#define INTERNAL_TS_ACTIVE_CONSOLE_ID   ( *((volatile ULONG*)(0x7ffe02d8)) )
 
#define LOGONID_CURRENT   ((ULONG)-1)
 
#define OBJ_INHERIT   0x00000002
 
#define OBJ_PERMANENT   0x00000010
 
#define OBJ_EXCLUSIVE   0x00000020
 
#define OBJ_CASE_INSENSITIVE   0x00000040
 
#define OBJ_OPENIF   0x00000080
 
#define OBJ_OPENLINK   0x00000100
 
#define OBJ_KERNEL_HANDLE   0x00000200
 
#define OBJ_FORCE_ACCESS_CHECK   0x00000400
 
#define OBJ_VALID_ATTRIBUTES   0x000007F2
 
#define SERVERNAME_CURRENT   ((HANDLE)NULL)
 
#define DPFLTR_ERROR_LEVEL   0
 
#define DPFLTR_WARNING_LEVEL   1
 
#define DPFLTR_TRACE_LEVEL   2
 
#define DPFLTR_INFO_LEVEL   3
 
#define DPFLTR_MASK   0x8000000
 
#define SE_MIN_WELL_KNOWN_PRIVILEGE   2
 
#define SE_CREATE_TOKEN_PRIVILEGE   2
 
#define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE   3
 
#define SE_LOCK_MEMORY_PRIVILEGE   4
 
#define SE_INCREASE_QUOTA_PRIVILEGE   5
 
#define SE_UNSOLICITED_INPUT_PRIVILEGE   6 /* obsolete */
 
#define SE_MACHINE_ACCOUNT_PRIVILEGE   6
 
#define SE_TCB_PRIVILEGE   7
 
#define SE_SECURITY_PRIVILEGE   8
 
#define SE_TAKE_OWNERSHIP_PRIVILEGE   9
 
#define SE_LOAD_DRIVER_PRIVILEGE   10
 
#define SE_SYSTEM_PROFILE_PRIVILEGE   11
 
#define SE_SYSTEMTIME_PRIVILEGE   12
 
#define SE_PROF_SINGLE_PROCESS_PRIVILEGE   13
 
#define SE_INC_BASE_PRIORITY_PRIVILEGE   14
 
#define SE_CREATE_PAGEFILE_PRIVILEGE   15
 
#define SE_CREATE_PERMANENT_PRIVILEGE   16
 
#define SE_BACKUP_PRIVILEGE   17
 
#define SE_RESTORE_PRIVILEGE   18
 
#define SE_SHUTDOWN_PRIVILEGE   19
 
#define SE_DEBUG_PRIVILEGE   20
 
#define SE_AUDIT_PRIVILEGE   21
 
#define SE_SYSTEM_ENVIRONMENT_PRIVILEGE   22
 
#define SE_CHANGE_NOTIFY_PRIVILEGE   23
 
#define SE_REMOTE_SHUTDOWN_PRIVILEGE   24
 
#define SE_UNDOCK_PRIVILEGE   25
 
#define SE_SYNC_AGENT_PRIVILEGE   26
 
#define SE_ENABLE_DELEGATION_PRIVILEGE   27
 
#define SE_MANAGE_VOLUME_PRIVILEGE   28
 
#define SE_IMPERSONATE_PRIVILEGE   29
 
#define SE_CREATE_GLOBAL_PRIVILEGE   30
 
#define SE_MAX_WELL_KNOWN_PRIVILEGE   SE_CREATE_GLOBAL_PRIVILEGE
 
#define FLG_STOP_ON_EXCEPTION   0x00000001
 
#define FLG_SHOW_LDR_SNAPS   0x00000002
 
#define FLG_DEBUG_INITIAL_COMMAND   0x00000004
 
#define FLG_STOP_ON_HUNG_GUI   0x00000008
 
#define FLG_HEAP_ENABLE_TAIL_CHECK   0x00000010
 
#define FLG_HEAP_ENABLE_FREE_CHECK   0x00000020
 
#define FLG_HEAP_VALIDATE_PARAMETERS   0x00000040
 
#define FLG_HEAP_VALIDATE_ALL   0x00000080
 
#define FLG_APPLICATION_VERIFIER   0x00000100
 
#define FLG_POOL_ENABLE_TAGGING   0x00000400
 
#define FLG_HEAP_ENABLE_TAGGING   0x00000800
 
#define FLG_USER_STACK_TRACE_DB   0x00001000
 
#define FLG_KERNEL_STACK_TRACE_DB   0x00002000
 
#define FLG_MAINTAIN_OBJECT_TYPELIST   0x00004000
 
#define FLG_HEAP_ENABLE_TAG_BY_DLL   0x00008000
 
#define FLG_DISABLE_STACK_EXTENSION   0x00010000
 
#define FLG_ENABLE_CSRDEBUG   0x00020000
 
#define FLG_ENABLE_KDEBUG_SYMBOL_LOAD   0x00040000
 
#define FLG_DISABLE_PAGE_KERNEL_STACKS   0x00080000
 
#define FLG_ENABLE_SYSTEM_CRIT_BREAKS   0x00100000
 
#define FLG_HEAP_DISABLE_COALESCING   0x00200000
 
#define FLG_ENABLE_CLOSE_EXCEPTIONS   0x00400000
 
#define FLG_ENABLE_EXCEPTION_LOGGING   0x00800000
 
#define FLG_ENABLE_HANDLE_TYPE_TAGGING   0x01000000
 
#define FLG_HEAP_PAGE_ALLOCS   0x02000000
 
#define FLG_DEBUG_INITIAL_COMMAND_EX   0x04000000
 
#define FLG_DISABLE_DBGPRINT   0x08000000
 
#define FLG_CRITSEC_EVENT_CREATION   0x10000000
 
#define FLG_LDR_TOP_DOWN   0x20000000
 
#define FLG_ENABLE_HANDLE_EXCEPTIONS   0x40000000
 
#define FLG_DISABLE_PROTDLLS   0x80000000
 
#define RTL_REGISTRY_ABSOLUTE   0
 
#define RTL_REGISTRY_SERVICES   1
 
#define RTL_REGISTRY_CONTROL   2
 
#define RTL_REGISTRY_WINDOWS_NT   3
 
#define RTL_REGISTRY_DEVICEMAP   4
 
#define RTL_REGISTRY_USER   5
 
#define RTL_REGISTRY_HANDLE   0x40000000
 
#define RTL_REGISTRY_OPTIONAL   0x80000000
 
#define RTL_QUERY_REGISTRY_SUBKEY   0x00000001
 
#define RTL_QUERY_REGISTRY_TOPKEY   0x00000002
 
#define RTL_QUERY_REGISTRY_REQUIRED   0x00000004
 
#define RTL_QUERY_REGISTRY_NOVALUE   0x00000008
 
#define RTL_QUERY_REGISTRY_NOEXPAND   0x00000010
 
#define RTL_QUERY_REGISTRY_DIRECT   0x00000020
 
#define RTL_QUERY_REGISTRY_DELETE   0x00000040
 
#define IO_COMPLETION_QUERY_STATE   0x0001
 
#define IO_COMPLETION_MODIFY_STATE   0x0002
 
#define IO_COMPLETION_ALL_ACCESS   (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
 
#define LDR_IMAGE_IS_DLL   0x00000004
 
#define LDR_LOAD_IN_PROGRESS   0x00001000
 
#define LDR_UNLOAD_IN_PROGRESS   0x00002000
 
#define LDR_NO_DLL_CALLS   0x00040000
 
#define LDR_PROCESS_ATTACHED   0x00080000
 
#define LDR_MODULE_REBASED   0x00200000
 
#define LDR_DONT_RESOLVE_REFS   0x40000000
 
#define LDR_WINE_INTERNAL   0x80000000
 
#define LDR_ADDREF_DLL_PIN   0x00000001
 
#define MAXIMUM_FILENAME_LENGTH   256
 
#define LDR_DLL_NOTIFICATION_REASON_LOADED   1
 
#define LDR_DLL_NOTIFICATION_REASON_UNLOADED   2
 
#define THREAD_CREATE_FLAGS_CREATE_SUSPENDED   0x00000001
 
#define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH   0x00000002
 
#define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER   0x00000004
 
#define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR   0x00000010
 
#define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET   0x00000020
 
#define THREAD_CREATE_FLAGS_INITIAL_THREAD   0x00000080
 
#define InitializeObjectAttributes(p, n, a, r, s)
 
#define NtCurrentProcess()   ((HANDLE)-1)
 
#define RtlFillMemory(Destination, Length, Fill)   memset((Destination),(Fill),(Length))
 
#define RtlMoveMemory(Destination, Source, Length)   memmove((Destination),(Source),(Length))
 
#define RtlStoreUlong(p, v)   do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
 
#define RtlStoreUlonglong(p, v)   do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
 
#define RtlRetrieveUlong(p, s)   memcpy((p), (s), sizeof(ULONG))
 
#define RtlRetrieveUlonglong(p, s)   memcpy((p), (s), sizeof(ULONGLONG))
 
#define RtlZeroMemory(Destination, Length)   memset((Destination),0,(Length))
 
#define InitializeListHead(le)   (void)((le)->Flink = (le)->Blink = (le))
 
#define InsertHeadList(le, e)   do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
 
#define InsertTailList(le, e)   do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
 
#define IsListEmpty(le)   ((le)->Flink == (le))
 
#define RemoveEntryList(e)   do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
 

Typedefs

typedef LONG NTSTATUS
 
typedef const charPCSZ
 
typedef short CSHORT
 
typedef CSHORTPCSHORT
 
typedef struct _STRING STRING
 
typedef struct _STRINGPSTRING
 
typedef STRING ANSI_STRING
 
typedef PSTRING PANSI_STRING
 
typedef const STRINGPCANSI_STRING
 
typedef STRING OEM_STRING
 
typedef PSTRING POEM_STRING
 
typedef const STRINGPCOEM_STRING
 
typedef struct _UNICODE_STRING UNICODE_STRING
 
typedef struct _UNICODE_STRINGPUNICODE_STRING
 
typedef const UNICODE_STRINGPCUNICODE_STRING
 
typedef struct _FILETIME FILETIME
 
typedef struct _FILETIMEPFILETIME
 
typedef struct _FILETIMELPFILETIME
 
typedef struct _TIME_FIELDS TIME_FIELDS
 
typedef struct _TIME_FIELDSPTIME_FIELDS
 
typedef struct
_RTL_TIME_ZONE_INFORMATION 
RTL_TIME_ZONE_INFORMATION
 
typedef struct
_RTL_TIME_ZONE_INFORMATION
PRTL_TIME_ZONE_INFORMATION
 
typedef struct
_RTL_TIME_DYNAMIC_ZONE_INFORMATION 
RTL_DYNAMIC_TIME_ZONE_INFORMATION
 
typedef struct
_RTL_TIME_DYNAMIC_ZONE_INFORMATION
PRTL_DYNAMIC_TIME_ZONE_INFORMATION
 
typedef struct _CLIENT_ID CLIENT_ID
 
typedef struct _CLIENT_IDPCLIENT_ID
 
typedef struct _CURDIR CURDIR
 
typedef struct _CURDIRPCURDIR
 
typedef struct
RTL_DRIVE_LETTER_CURDIR 
RTL_DRIVE_LETTER_CURDIR
 
typedef struct
RTL_DRIVE_LETTER_CURDIR
PRTL_DRIVE_LETTER_CURDIR
 
typedef struct tagRTL_BITMAP RTL_BITMAP
 
typedef struct tagRTL_BITMAPPRTL_BITMAP
 
typedef const RTL_BITMAPPCRTL_BITMAP
 
typedef struct tagRTL_BITMAP_RUN RTL_BITMAP_RUN
 
typedef struct tagRTL_BITMAP_RUNPRTL_BITMAP_RUN
 
typedef const RTL_BITMAP_RUNPCRTL_BITMAP_RUN
 
typedef struct
_RTL_USER_PROCESS_PARAMETERS 
RTL_USER_PROCESS_PARAMETERS
 
typedef struct
_RTL_USER_PROCESS_PARAMETERS
PRTL_USER_PROCESS_PARAMETERS
 
typedef struct _PEB_LDR_DATA PEB_LDR_DATA
 
typedef struct _PEB_LDR_DATAPPEB_LDR_DATA
 
typedef struct _GDI_TEB_BATCH GDI_TEB_BATCH
 
typedef struct
_RTL_ACTIVATION_CONTEXT_STACK_FRAME 
RTL_ACTIVATION_CONTEXT_STACK_FRAME
 
typedef struct
_RTL_ACTIVATION_CONTEXT_STACK_FRAME
PRTL_ACTIVATION_CONTEXT_STACK_FRAME
 
typedef struct
_ACTIVATION_CONTEXT_STACK 
ACTIVATION_CONTEXT_STACK
 
typedef struct
_ACTIVATION_CONTEXT_STACK
PACTIVATION_CONTEXT_STACK
 
typedef struct
_TEB_ACTIVE_FRAME_CONTEXT 
TEB_ACTIVE_FRAME_CONTEXT
 
typedef struct
_TEB_ACTIVE_FRAME_CONTEXT
PTEB_ACTIVE_FRAME_CONTEXT
 
typedef struct
_TEB_ACTIVE_FRAME_CONTEXT_EX 
TEB_ACTIVE_FRAME_CONTEXT_EX
 
typedef struct
_TEB_ACTIVE_FRAME_CONTEXT_EX
PTEB_ACTIVE_FRAME_CONTEXT_EX
 
typedef struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME
 
typedef struct _TEB_ACTIVE_FRAMEPTEB_ACTIVE_FRAME
 
typedef struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX
 
typedef struct
_TEB_ACTIVE_FRAME_EX
PTEB_ACTIVE_FRAME_EX
 
typedef struct _PEB PEB
 
typedef struct _PEBPPEB
 
typedef struct _TEB TEB
 
typedef struct _TEBPTEB
 
typedef enum
_FILE_INFORMATION_CLASS 
FILE_INFORMATION_CLASS
 
typedef enum
_FILE_INFORMATION_CLASS
PFILE_INFORMATION_CLASS
 
typedef struct
_FILE_DIRECTORY_INFORMATION 
FILE_DIRECTORY_INFORMATION
 
typedef struct
_FILE_DIRECTORY_INFORMATION
PFILE_DIRECTORY_INFORMATION
 
typedef struct
_FILE_FULL_DIRECTORY_INFORMATION 
FILE_FULL_DIRECTORY_INFORMATION
 
typedef struct
_FILE_FULL_DIRECTORY_INFORMATION
PFILE_FULL_DIRECTORY_INFORMATION
 
typedef struct
_FILE_FULL_DIRECTORY_INFORMATION 
FILE_FULL_DIR_INFORMATION
 
typedef struct
_FILE_FULL_DIRECTORY_INFORMATION
PFILE_FULL_DIR_INFORMATION
 
typedef struct
_FILE_ID_FULL_DIRECTORY_INFORMATION 
FILE_ID_FULL_DIRECTORY_INFORMATION
 
typedef struct
_FILE_ID_FULL_DIRECTORY_INFORMATION
PFILE_ID_FULL_DIRECTORY_INFORMATION
 
typedef struct
_FILE_BOTH_DIRECTORY_INFORMATION 
FILE_BOTH_DIRECTORY_INFORMATION
 
typedef struct
_FILE_BOTH_DIRECTORY_INFORMATION
PFILE_BOTH_DIRECTORY_INFORMATION
 
typedef struct
_FILE_BOTH_DIRECTORY_INFORMATION 
FILE_BOTH_DIR_INFORMATION
 
typedef struct
_FILE_BOTH_DIRECTORY_INFORMATION
PFILE_BOTH_DIR_INFORMATION
 
typedef struct
_FILE_ID_BOTH_DIRECTORY_INFORMATION 
FILE_ID_BOTH_DIRECTORY_INFORMATION
 
typedef struct
_FILE_ID_BOTH_DIRECTORY_INFORMATION
PFILE_ID_BOTH_DIRECTORY_INFORMATION
 
typedef struct
_FILE_ID_GLOBAL_TX_DIR_INFORMATION 
FILE_ID_GLOBAL_TX_DIR_INFORMATION
 
typedef struct
_FILE_ID_GLOBAL_TX_DIR_INFORMATION
PFILE_ID_GLOBAL_TX_DIR_INFORMATION
 
typedef struct
_FILE_BASIC_INFORMATION 
FILE_BASIC_INFORMATION
 
typedef struct
_FILE_BASIC_INFORMATION
PFILE_BASIC_INFORMATION
 
typedef struct
_FILE_STANDARD_INFORMATION 
FILE_STANDARD_INFORMATION
 
typedef struct
_FILE_STANDARD_INFORMATION
PFILE_STANDARD_INFORMATION
 
typedef struct
_FILE_INTERNAL_INFORMATION 
FILE_INTERNAL_INFORMATION
 
typedef struct
_FILE_INTERNAL_INFORMATION
PFILE_INTERNAL_INFORMATION
 
typedef struct _FILE_ID_128 FILE_ID_128
 
typedef struct _FILE_ID_128PFILE_ID_128
 
typedef struct _FILE_ID_INFORMATION FILE_ID_INFORMATION
 
typedef struct
_FILE_ID_INFORMATION
PFILE_ID_INFORMATION
 
typedef struct _FILE_EA_INFORMATION FILE_EA_INFORMATION
 
typedef struct
_FILE_EA_INFORMATION
PFILE_EA_INFORMATION
 
typedef struct
_FILE_ACCESS_INFORMATION 
FILE_ACCESS_INFORMATION
 
typedef struct
_FILE_ACCESS_INFORMATION
PFILE_ACCESS_INFORMATION
 
typedef struct
_FILE_NAME_INFORMATION 
FILE_NAME_INFORMATION
 
typedef struct
_FILE_NAME_INFORMATION
PFILE_NAME_INFORMATION
 
typedef struct
_FILE_RENAME_INFORMATION 
FILE_RENAME_INFORMATION
 
typedef struct
_FILE_RENAME_INFORMATION
PFILE_RENAME_INFORMATION
 
typedef struct
_FILE_LINK_INFORMATION 
FILE_LINK_INFORMATION
 
typedef struct
_FILE_LINK_INFORMATION
PFILE_LINK_INFORMATION
 
typedef struct
_FILE_NAMES_INFORMATION 
FILE_NAMES_INFORMATION
 
typedef struct
_FILE_NAMES_INFORMATION
PFILE_NAMES_INFORMATION
 
typedef struct
_FILE_DISPOSITION_INFORMATION 
FILE_DISPOSITION_INFORMATION
 
typedef struct
_FILE_DISPOSITION_INFORMATION
PFILE_DISPOSITION_INFORMATION
 
typedef struct
_FILE_POSITION_INFORMATION 
FILE_POSITION_INFORMATION
 
typedef struct
_FILE_POSITION_INFORMATION
PFILE_POSITION_INFORMATION
 
typedef struct
_FILE_ALIGNMENT_INFORMATION 
FILE_ALIGNMENT_INFORMATION
 
typedef struct
_FILE_ALIGNMENT_INFORMATION
PFILE_ALIGNMENT_INFORMATION
 
typedef struct
_FILE_ALLOCATION_INFORMATION 
FILE_ALLOCATION_INFORMATION
 
typedef struct
_FILE_ALLOCATION_INFORMATION
PFILE_ALLOCATION_INFORMATION
 
typedef struct
_FILE_END_OF_FILE_INFORMATION 
FILE_END_OF_FILE_INFORMATION
 
typedef struct
_FILE_END_OF_FILE_INFORMATION
PFILE_END_OF_FILE_INFORMATION
 
typedef struct
_FILE_NETWORK_OPEN_INFORMATION 
FILE_NETWORK_OPEN_INFORMATION
 
typedef struct
_FILE_NETWORK_OPEN_INFORMATION
PFILE_NETWORK_OPEN_INFORMATION
 
typedef struct
_FILE_FULL_EA_INFORMATION 
FILE_FULL_EA_INFORMATION
 
typedef struct
_FILE_FULL_EA_INFORMATION
PFILE_FULL_EA_INFORMATION
 
typedef struct
_FILE_MODE_INFORMATION 
FILE_MODE_INFORMATION
 
typedef struct
_FILE_MODE_INFORMATION
PFILE_MODE_INFORMATION
 
typedef struct
_FILE_STREAM_INFORMATION 
FILE_STREAM_INFORMATION
 
typedef struct
_FILE_STREAM_INFORMATION
PFILE_STREAM_INFORMATION
 
typedef struct
_FILE_ATTRIBUTE_TAG_INFORMATION 
FILE_ATTRIBUTE_TAG_INFORMATION
 
typedef struct
_FILE_ATTRIBUTE_TAG_INFORMATION
PFILE_ATTRIBUTE_TAG_INFORMATION
 
typedef struct
_FILE_MAILSLOT_QUERY_INFORMATION 
FILE_MAILSLOT_QUERY_INFORMATION
 
typedef struct
_FILE_MAILSLOT_QUERY_INFORMATION
PFILE_MAILSLOT_QUERY_INFORMATION
 
typedef struct
_FILE_MAILSLOT_SET_INFORMATION 
FILE_MAILSLOT_SET_INFORMATION
 
typedef struct
_FILE_MAILSLOT_SET_INFORMATION
PFILE_MAILSLOT_SET_INFORMATION
 
typedef struct
_FILE_PIPE_INFORMATION 
FILE_PIPE_INFORMATION
 
typedef struct
_FILE_PIPE_INFORMATION
PFILE_PIPE_INFORMATION
 
typedef struct
_FILE_PIPE_LOCAL_INFORMATION 
FILE_PIPE_LOCAL_INFORMATION
 
typedef struct
_FILE_PIPE_LOCAL_INFORMATION
PFILE_PIPE_LOCAL_INFORMATION
 
typedef struct
_FILE_OBJECTID_INFORMATION 
FILE_OBJECTID_INFORMATION
 
typedef struct
_FILE_OBJECTID_INFORMATION
PFILE_OBJECTID_INFORMATION
 
typedef struct
_FILE_QUOTA_INFORMATION 
FILE_QUOTA_INFORMATION
 
typedef struct
_FILE_QUOTA_INFORMATION
PFILE_QUOTA_INFORMATION
 
typedef struct
_FILE_REPARSE_POINT_INFORMATION 
FILE_REPARSE_POINT_INFORMATION
 
typedef struct
_FILE_REPARSE_POINT_INFORMATION
PFILE_REPARSE_POINT_INFORMATION
 
typedef struct
_FILE_ALL_INFORMATION 
FILE_ALL_INFORMATION
 
typedef struct
_FILE_ALL_INFORMATION
PFILE_ALL_INFORMATION
 
typedef struct
_FILE_IO_COMPLETION_NOTIFICATION_INFORMATION 
FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
typedef struct
_FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
typedef enum _FSINFOCLASS FS_INFORMATION_CLASS
 
typedef enum _FSINFOCLASSPFS_INFORMATION_CLASS
 
typedef enum _KEY_INFORMATION_CLASS KEY_INFORMATION_CLASS
 
typedef enum
_KEY_VALUE_INFORMATION_CLASS 
KEY_VALUE_INFORMATION_CLASS
 
typedef enum
_OBJECT_INFORMATION_CLASS 
OBJECT_INFORMATION_CLASS
 
typedef enum
_OBJECT_INFORMATION_CLASS
POBJECT_INFORMATION_CLASS
 
typedef enum _PROCESSINFOCLASS PROCESSINFOCLASS
 
typedef enum _PROCESSINFOCLASS PROCESS_INFORMATION_CLASS
 
typedef enum _SECTION_INHERIT SECTION_INHERIT
 
typedef enum
_SYSTEM_INFORMATION_CLASS 
SYSTEM_INFORMATION_CLASS
 
typedef enum
_SYSTEM_INFORMATION_CLASS
PSYSTEM_INFORMATION_CLASS
 
typedef enum _THREADINFOCLASS THREADINFOCLASS
 
typedef struct
_THREAD_BASIC_INFORMATION 
THREAD_BASIC_INFORMATION
 
typedef struct
_THREAD_BASIC_INFORMATION
PTHREAD_BASIC_INFORMATION
 
typedef struct
_THREAD_DESCRIPTOR_INFORMATION 
THREAD_DESCRIPTOR_INFORMATION
 
typedef struct
_THREAD_DESCRIPTOR_INFORMATION
PTHREAD_DESCRIPTOR_INFORMATION
 
typedef struct _KERNEL_USER_TIMES KERNEL_USER_TIMES
 
typedef struct _KERNEL_USER_TIMESPKERNEL_USER_TIMES
 
typedef enum _WINSTATIONINFOCLASS WINSTATIONINFOCLASS
 
typedef enum
_MEMORY_INFORMATION_CLASS 
MEMORY_INFORMATION_CLASS
 
typedef struct _MEMORY_SECTION_NAME MEMORY_SECTION_NAME
 
typedef struct
_MEMORY_SECTION_NAME
PMEMORY_SECTION_NAME
 
typedef enum
_MUTANT_INFORMATION_CLASS 
MUTANT_INFORMATION_CLASS
 
typedef enum
_MUTANT_INFORMATION_CLASS
PMUTANT_INFORMATION_CLASS
 
typedef struct
_MUTANT_BASIC_INFORMATION 
MUTANT_BASIC_INFORMATION
 
typedef struct
_MUTANT_BASIC_INFORMATION
PMUTANT_BASIC_INFORMATION
 
typedef enum
_TIMER_INFORMATION_CLASS 
TIMER_INFORMATION_CLASS
 
typedef struct
_TIMER_BASIC_INFORMATION 
TIMER_BASIC_INFORMATION
 
typedef struct
_TIMER_BASIC_INFORMATION
PTIMER_BASIC_INFORMATION
 
typedef struct
_SYSTEM_THREAD_INFORMATION 
SYSTEM_THREAD_INFORMATION
 
typedef struct
_SYSTEM_THREAD_INFORMATION
PSYSTEM_THREAD_INFORMATION
 
typedef struct _IO_STATUS_BLOCK IO_STATUS_BLOCK
 
typedef struct _IO_STATUS_BLOCKPIO_STATUS_BLOCK
 
typedef void(WINAPIPIO_APC_ROUTINE )(PVOID, PIO_STATUS_BLOCK, ULONG)
 
typedef struct
_KEY_BASIC_INFORMATION 
KEY_BASIC_INFORMATION
 
typedef struct
_KEY_BASIC_INFORMATION
PKEY_BASIC_INFORMATION
 
typedef struct
_KEY_NODE_INFORMATION 
KEY_NODE_INFORMATION
 
typedef struct
_KEY_NODE_INFORMATION
PKEY_NODE_INFORMATION
 
typedef struct
_KEY_FULL_INFORMATION 
KEY_FULL_INFORMATION
 
typedef struct
_KEY_FULL_INFORMATION
PKEY_FULL_INFORMATION
 
typedef struct
_KEY_NAME_INFORMATION 
KEY_NAME_INFORMATION
 
typedef struct
_KEY_NAME_INFORMATION
PKEY_NAME_INFORMATION
 
typedef struct
_KEY_CACHED_INFORMATION 
KEY_CACHED_INFORMATION
 
typedef struct
_KEY_CACHED_INFORMATION
PKEY_CACHED_INFORMATION
 
typedef struct _KEY_VALUE_ENTRY KEY_VALUE_ENTRY
 
typedef struct _KEY_VALUE_ENTRYPKEY_VALUE_ENTRY
 
typedef struct
_KEY_VALUE_BASIC_INFORMATION 
KEY_VALUE_BASIC_INFORMATION
 
typedef struct
_KEY_VALUE_BASIC_INFORMATION
PKEY_VALUE_BASIC_INFORMATION
 
typedef struct
_KEY_VALUE_FULL_INFORMATION 
KEY_VALUE_FULL_INFORMATION
 
typedef struct
_KEY_VALUE_FULL_INFORMATION
PKEY_VALUE_FULL_INFORMATION
 
typedef struct
_KEY_VALUE_PARTIAL_INFORMATION 
KEY_VALUE_PARTIAL_INFORMATION
 
typedef struct
_KEY_VALUE_PARTIAL_INFORMATION
PKEY_VALUE_PARTIAL_INFORMATION
 
typedef struct _OBJECT_ATTRIBUTES OBJECT_ATTRIBUTES
 
typedef struct _OBJECT_ATTRIBUTESPOBJECT_ATTRIBUTES
 
typedef struct
_OBJECT_DATA_INFORMATION 
OBJECT_DATA_INFORMATION
 
typedef struct
_OBJECT_DATA_INFORMATION
POBJECT_DATA_INFORMATION
 
typedef struct
_OBJECT_BASIC_INFORMATION 
OBJECT_BASIC_INFORMATION
 
typedef struct
_OBJECT_BASIC_INFORMATION
POBJECT_BASIC_INFORMATION
 
typedef struct
_OBJECT_NAME_INFORMATION 
OBJECT_NAME_INFORMATION
 
typedef struct
_OBJECT_NAME_INFORMATION
POBJECT_NAME_INFORMATION
 
typedef struct
__OBJECT_TYPE_INFORMATION 
OBJECT_TYPE_INFORMATION
 
typedef struct
__OBJECT_TYPE_INFORMATION
POBJECT_TYPE_INFORMATION
 
typedef struct
_OBJECT_TYPES_INFORMATION 
OBJECT_TYPES_INFORMATION
 
typedef struct
_OBJECT_TYPES_INFORMATION
POBJECT_TYPES_INFORMATION
 
typedef struct
_PROCESS_BASIC_INFORMATION 
PROCESS_BASIC_INFORMATION
 
typedef struct
_PROCESS_BASIC_INFORMATION
PPROCESS_BASIC_INFORMATION
 
typedef struct
_PROCESS_PRIORITY_CLASS 
PROCESS_PRIORITY_CLASS
 
typedef struct
_PROCESS_PRIORITY_CLASS
PPROCESS_PRIORITY_CLASS
 
typedef struct _RTL_HEAP_DEFINITION RTL_HEAP_DEFINITION
 
typedef struct
_RTL_HEAP_DEFINITION
PRTL_HEAP_DEFINITION
 
typedef struct _RTL_RWLOCK RTL_RWLOCK
 
typedef struct _RTL_RWLOCKLPRTL_RWLOCK
 
typedef struct
_SYSTEM_BASIC_INFORMATION 
SYSTEM_BASIC_INFORMATION
 
typedef struct
_SYSTEM_BASIC_INFORMATION
PSYSTEM_BASIC_INFORMATION
 
typedef struct
_SYSTEM_CPU_INFORMATION 
SYSTEM_CPU_INFORMATION
 
typedef struct
_SYSTEM_CPU_INFORMATION
PSYSTEM_CPU_INFORMATION
 
typedef struct
_SYSTEM_PERFORMANCE_INFORMATION 
SYSTEM_PERFORMANCE_INFORMATION
 
typedef struct
_SYSTEM_PERFORMANCE_INFORMATION
PSYSTEM_PERFORMANCE_INFORMATION
 
typedef struct
_SYSTEM_TIMEOFDAY_INFORMATION 
SYSTEM_TIMEOFDAY_INFORMATION
 
typedef struct
_SYSTEM_TIMEOFDAY_INFORMATION
PSYSTEM_TIMEOFDAY_INFORMATION
 
typedef struct
_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION 
SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
typedef struct
_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
typedef struct
_SYSTEM_DRIVER_INFORMATION 
SYSTEM_DRIVER_INFORMATION
 
typedef struct
_SYSTEM_DRIVER_INFORMATION
PSYSTEM_DRIVER_INFORMATION
 
typedef struct _SYSTEM_HANDLE_ENTRY SYSTEM_HANDLE_ENTRY
 
typedef struct
_SYSTEM_HANDLE_ENTRY
PSYSTEM_HANDLE_ENTRY
 
typedef struct
_SYSTEM_HANDLE_INFORMATION 
SYSTEM_HANDLE_INFORMATION
 
typedef struct
_SYSTEM_HANDLE_INFORMATION
PSYSTEM_HANDLE_INFORMATION
 
typedef struct
_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX 
SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
typedef struct
_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
PSYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
typedef struct
_SYSTEM_HANDLE_INFORMATION_EX 
SYSTEM_HANDLE_INFORMATION_EX
 
typedef struct
_SYSTEM_HANDLE_INFORMATION_EX
PSYSTEM_HANDLE_INFORMATION_EX
 
typedef struct
_SYSTEM_CACHE_INFORMATION 
SYSTEM_CACHE_INFORMATION
 
typedef struct
_SYSTEM_CACHE_INFORMATION
PSYSTEM_CACHE_INFORMATION
 
typedef struct
_SYSTEM_INTERRUPT_INFORMATION 
SYSTEM_INTERRUPT_INFORMATION
 
typedef struct
_SYSTEM_INTERRUPT_INFORMATION
PSYSTEM_INTERRUPT_INFORMATION
 
typedef struct
_SYSTEM_CONFIGURATION_INFO 
SYSTEM_CONFIGURATION_INFO
 
typedef struct
_SYSTEM_CONFIGURATION_INFO
PSYSTEM_CONFIGURATION_INFO
 
typedef struct
_SYSTEM_EXCEPTION_INFORMATION 
SYSTEM_EXCEPTION_INFORMATION
 
typedef struct
_SYSTEM_EXCEPTION_INFORMATION
PSYSTEM_EXCEPTION_INFORMATION
 
typedef struct
_SYSTEM_LOOKASIDE_INFORMATION 
SYSTEM_LOOKASIDE_INFORMATION
 
typedef struct
_SYSTEM_LOOKASIDE_INFORMATION
PSYSTEM_LOOKASIDE_INFORMATION
 
typedef struct
_SYSTEM_KERNEL_DEBUGGER_INFORMATION 
SYSTEM_KERNEL_DEBUGGER_INFORMATION
 
typedef struct
_SYSTEM_KERNEL_DEBUGGER_INFORMATION
PSYSTEM_KERNEL_DEBUGGER_INFORMATION
 
typedef struct _VM_COUNTERS_ VM_COUNTERS
 
typedef struct _VM_COUNTERS_PVM_COUNTERS
 
typedef struct
_SYSTEM_PROCESS_INFORMATION 
SYSTEM_PROCESS_INFORMATION
 
typedef struct
_SYSTEM_PROCESS_INFORMATION
PSYSTEM_PROCESS_INFORMATION
 
typedef struct
_SYSTEM_REGISTRY_QUOTA_INFORMATION 
SYSTEM_REGISTRY_QUOTA_INFORMATION
 
typedef struct
_SYSTEM_REGISTRY_QUOTA_INFORMATION
PSYSTEM_REGISTRY_QUOTA_INFORMATION
 
typedef struct
_SYSTEM_TIME_ADJUSTMENT 
SYSTEM_TIME_ADJUSTMENT
 
typedef struct
_SYSTEM_TIME_ADJUSTMENT
PSYSTEM_TIME_ADJUSTMENT
 
typedef struct
_WINSTATIONINFORMATIONW 
WINSTATIONINFORMATIONW
 
typedef struct
_WINSTATIONINFORMATIONW
PWINSTATIONINFORMATIONW
 
typedef BOOLEAN(WINAPIPWINSTATIONQUERYINFORMATIONW )(HANDLE, ULONG, WINSTATIONINFOCLASS, PVOID, ULONG, PULONG)
 
typedef struct _LDR_RESOURCE_INFO LDR_RESOURCE_INFO
 
typedef struct _LDR_RESOURCE_INFOPLDR_RESOURCE_INFO
 
typedef struct _DEBUG_BUFFER DEBUG_BUFFER
 
typedef struct _DEBUG_BUFFERPDEBUG_BUFFER
 
typedef struct
_DEBUG_MODULE_INFORMATION 
DEBUG_MODULE_INFORMATION
 
typedef struct
_DEBUG_MODULE_INFORMATION
PDEBUG_MODULE_INFORMATION
 
typedef struct
_DEBUG_HEAP_INFORMATION 
DEBUG_HEAP_INFORMATION
 
typedef struct
_DEBUG_HEAP_INFORMATION
PDEBUG_HEAP_INFORMATION
 
typedef struct
_DEBUG_LOCK_INFORMATION 
DEBUG_LOCK_INFORMATION
 
typedef struct
_DEBUG_LOCK_INFORMATION
PDEBUG_LOCK_INFORMATION
 
typedef struct _PORT_MESSAGE_HEADER PORT_MESSAGE_HEADER
 
typedef struct
_PORT_MESSAGE_HEADER
PPORT_MESSAGE_HEADER
 
typedef struct _PORT_MESSAGE_HEADER PORT_MESSAGE
 
typedef struct
_PORT_MESSAGE_HEADER
PPORT_MESSAGE
 
typedef unsigned short RTL_ATOM
 
typedef unsigned shortPRTL_ATOM
 
typedef struct atom_table * RTL_ATOM_TABLE
 
typedef struct atom_table ** PRTL_ATOM_TABLE
 
typedef enum
_ATOM_INFORMATION_CLASS 
ATOM_INFORMATION_CLASS
 
typedef struct
_ATOM_BASIC_INFORMATION 
ATOM_BASIC_INFORMATION
 
typedef struct
_ATOM_BASIC_INFORMATION
PATOM_BASIC_INFORMATION
 
typedef struct _RTL_HANDLE RTL_HANDLE
 
typedef struct _RTL_HANDLE_TABLE RTL_HANDLE_TABLE
 
typedef void(CALLBACKPNTAPCFUNC )(ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
typedef void(CALLBACKPRTL_THREAD_START_ROUTINE )(LPVOID)
 
typedef DWORD(CALLBACKPRTL_WORK_ITEM_ROUTINE )(LPVOID)
 
typedef void(NTAPIRTL_WAITORTIMERCALLBACKFUNC )(PVOID, BOOLEAN)
 
typedef NTSTATUS(WINAPIPRTL_QUERY_REGISTRY_ROUTINE )(PCWSTR ValueName, ULONG ValueType, PVOID ValueData, ULONG ValueLength, PVOID Context, PVOID EntryContext)
 
typedef struct
_RTL_QUERY_REGISTRY_TABLE 
RTL_QUERY_REGISTRY_TABLE
 
typedef struct
_RTL_QUERY_REGISTRY_TABLE
PRTL_QUERY_REGISTRY_TABLE
 
typedef struct
_KEY_MULTIPLE_VALUE_INFORMATION 
KEY_MULTIPLE_VALUE_INFORMATION
 
typedef struct
_KEY_MULTIPLE_VALUE_INFORMATION
PKEY_MULTIPLE_VALUE_INFORMATION
 
typedef VOID(CALLBACKPRTL_OVERLAPPED_COMPLETION_ROUTINE )(DWORD, DWORD, LPVOID)
 
typedef enum
_EVENT_INFORMATION_CLASS 
EVENT_INFORMATION_CLASS
 
typedef enum
_EVENT_INFORMATION_CLASS
PEVENT_INFORMATION_CLASS
 
typedef struct
_EVENT_BASIC_INFORMATION 
EVENT_BASIC_INFORMATION
 
typedef struct
_EVENT_BASIC_INFORMATION
PEVENT_BASIC_INFORMATION
 
typedef enum
_SEMAPHORE_INFORMATION_CLASS 
SEMAPHORE_INFORMATION_CLASS
 
typedef enum
_SEMAPHORE_INFORMATION_CLASS
PSEMAPHORE_INFORMATION_CLASS
 
typedef struct
_SEMAPHORE_BASIC_INFORMATION 
SEMAPHORE_BASIC_INFORMATION
 
typedef struct
_SEMAPHORE_BASIC_INFORMATION
PSEMAPHORE_BASIC_INFORMATION
 
typedef enum
_SECTION_INFORMATION_CLASS 
SECTION_INFORMATION_CLASS
 
typedef struct
_SECTION_BASIC_INFORMATION 
SECTION_BASIC_INFORMATION
 
typedef struct
_SECTION_BASIC_INFORMATION
PSECTION_BASIC_INFORMATION
 
typedef struct
_SECTION_IMAGE_INFORMATION 
SECTION_IMAGE_INFORMATION
 
typedef struct
_SECTION_IMAGE_INFORMATION
PSECTION_IMAGE_INFORMATION
 
typedef struct _LPC_SECTION_WRITE LPC_SECTION_WRITE
 
typedef struct _LPC_SECTION_WRITEPLPC_SECTION_WRITE
 
typedef struct _LPC_SECTION_READ LPC_SECTION_READ
 
typedef struct _LPC_SECTION_READPLPC_SECTION_READ
 
typedef struct _LPC_MESSAGE LPC_MESSAGE
 
typedef struct _LPC_MESSAGEPLPC_MESSAGE
 
typedef struct
_RTL_USER_PROCESS_INFORMATION 
RTL_USER_PROCESS_INFORMATION
 
typedef struct
_RTL_USER_PROCESS_INFORMATION
PRTL_USER_PROCESS_INFORMATION
 
typedef enum _SHUTDOWN_ACTION SHUTDOWN_ACTION
 
typedef enum _SHUTDOWN_ACTIONPSHUTDOWN_ACTION
 
typedef enum _KPROFILE_SOURCE KPROFILE_SOURCE
 
typedef enum _KPROFILE_SOURCEPKPROFILE_SOURCE
 
typedef struct
_DIRECTORY_BASIC_INFORMATION 
DIRECTORY_BASIC_INFORMATION
 
typedef struct
_DIRECTORY_BASIC_INFORMATION
PDIRECTORY_BASIC_INFORMATION
 
typedef struct _INITIAL_TEB INITIAL_TEB
 
typedef struct _INITIAL_TEBPINITIAL_TEB
 
typedef enum
_PORT_INFORMATION_CLASS 
PORT_INFORMATION_CLASS
 
typedef enum
_PORT_INFORMATION_CLASS
PPORT_INFORMATION_CLASS
 
typedef enum
_IO_COMPLETION_INFORMATION_CLASS 
IO_COMPLETION_INFORMATION_CLASS
 
typedef enum
_IO_COMPLETION_INFORMATION_CLASS
PIO_COMPLETION_INFORMATION_CLASS
 
typedef struct
_FILE_COMPLETION_INFORMATION 
FILE_COMPLETION_INFORMATION
 
typedef struct
_FILE_COMPLETION_INFORMATION
PFILE_COMPLETION_INFORMATION
 
typedef enum
_HARDERROR_RESPONSE_OPTION 
HARDERROR_RESPONSE_OPTION
 
typedef enum
_HARDERROR_RESPONSE_OPTION
PHARDERROR_RESPONSE_OPTION
 
typedef enum _HARDERROR_RESPONSE HARDERROR_RESPONSE
 
typedef enum _HARDERROR_RESPONSEPHARDERROR_RESPONSE
 
typedef enum _SYSDBG_COMMAND SYSDBG_COMMAND
 
typedef enum _SYSDBG_COMMANDPSYSDBG_COMMAND
 
typedef struct _LDR_MODULE LDR_MODULE
 
typedef struct _LDR_MODULEPLDR_MODULE
 
typedef struct
_LDR_DLL_LOADED_NOTIFICATION_DATA 
LDR_DLL_LOADED_NOTIFICATION_DATA
 
typedef struct
_LDR_DLL_LOADED_NOTIFICATION_DATA
PLDR_DLL_LOADED_NOTIFICATION_DATA
 
typedef struct
_LDR_DLL_UNLOADED_NOTIFICATION_DATA 
LDR_DLL_UNLOADED_NOTIFICATION_DATA
 
typedef struct
_LDR_DLL_UNLOADED_NOTIFICATION_DATA
PLDR_DLL_UNLOADED_NOTIFICATION_DATA
 
typedef union
_LDR_DLL_NOTIFICATION_DATA 
LDR_DLL_NOTIFICATION_DATA
 
typedef union
_LDR_DLL_NOTIFICATION_DATA
PLDR_DLL_NOTIFICATION_DATA
 
typedef void(CALLBACKPLDR_DLL_NOTIFICATION_FUNCTION )(ULONG, LDR_DLL_NOTIFICATION_DATA *, void *)
 
typedef struct _SYSTEM_MODULE SYSTEM_MODULE
 
typedef struct _SYSTEM_MODULEPSYSTEM_MODULE
 
typedef struct
_SYSTEM_MODULE_INFORMATION 
SYSTEM_MODULE_INFORMATION
 
typedef struct
_SYSTEM_MODULE_INFORMATION
PSYSTEM_MODULE_INFORMATION
 

Enumerations

enum  _FILE_INFORMATION_CLASS {
  FileDirectoryInformation = 1, FileFullDirectoryInformation, FileBothDirectoryInformation, FileBasicInformation,
  FileStandardInformation, FileInternalInformation, FileEaInformation, FileAccessInformation,
  FileNameInformation, FileRenameInformation, FileLinkInformation, FileNamesInformation,
  FileDispositionInformation, FilePositionInformation, FileFullEaInformation, FileModeInformation,
  FileAlignmentInformation, FileAllInformation, FileAllocationInformation, FileEndOfFileInformation,
  FileAlternateNameInformation, FileStreamInformation, FilePipeInformation, FilePipeLocalInformation,
  FilePipeRemoteInformation, FileMailslotQueryInformation, FileMailslotSetInformation, FileCompressionInformation,
  FileObjectIdInformation, FileCompletionInformation, FileMoveClusterInformation, FileQuotaInformation,
  FileReparsePointInformation, FileNetworkOpenInformation, FileAttributeTagInformation, FileTrackingInformation,
  FileIdBothDirectoryInformation, FileIdFullDirectoryInformation, FileValidDataLengthInformation, FileShortNameInformation,
  FileIoCompletionNotificationInformation, FileIoStatusBlockRangeInformation, FileIoPriorityHintInformation, FileSfioReserveInformation,
  FileSfioVolumeInformation, FileHardLinkInformation, FileProcessIdsUsingFileInformation, FileNormalizedNameInformation,
  FileNetworkPhysicalNameInformation, FileIdGlobalTxDirectoryInformation, FileMaximumInformation, FileDirectoryInformation = 1,
  FileFullDirectoryInformation, FileBothDirectoryInformation, FileBasicInformation, FileStandardInformation,
  FileInternalInformation, FileEaInformation, FileAccessInformation, FileNameInformation,
  FileRenameInformation, FileLinkInformation, FileNamesInformation, FileDispositionInformation,
  FilePositionInformation, FileFullEaInformation, FileModeInformation, FileAlignmentInformation,
  FileAllInformation, FileAllocationInformation, FileEndOfFileInformation, FileAlternateNameInformation,
  FileStreamInformation, FilePipeInformation, FilePipeLocalInformation, FilePipeRemoteInformation,
  FileMailslotQueryInformation, FileMailslotSetInformation, FileCompressionInformation, FileCopyOnWriteInformation,
  FileCompletionInformation, FileMoveClusterInformation, FileOleClassIdInformation, FileOleStateBitsInformation,
  FileNetworkOpenInformation, FileObjectIdInformation, FileOleAllInformation, FileOleDirectoryInformation,
  FileContentIndexInformation, FileInheritContentIndexInformation, FileOleInformation, FileMaximumInformation,
  FileDirectoryInformation = 1, FileFullDirectoryInformation, FileBothDirectoryInformation, FileBasicInformation,
  FileStandardInformation, FileInternalInformation, FileEaInformation, FileAccessInformation,
  FileNameInformation, FileRenameInformation, FileLinkInformation, FileNamesInformation,
  FileDispositionInformation, FilePositionInformation, FileFullEaInformation, FileModeInformation,
  FileAlignmentInformation, FileAllInformation, FileAllocationInformation, FileEndOfFileInformation,
  FileAlternateNameInformation, FileStreamInformation, FilePipeInformation, FilePipeLocalInformation,
  FilePipeRemoteInformation, FileMailslotQueryInformation, FileMailslotSetInformation, FileCompressionInformation,
  FileCopyOnWriteInformation, FileCompletionInformation, FileMoveClusterInformation, FileOleClassIdInformation,
  FileOleStateBitsInformation, FileNetworkOpenInformation, FileObjectIdInformation, FileOleAllInformation,
  FileOleDirectoryInformation, FileContentIndexInformation, FileInheritContentIndexInformation, FileOleInformation,
  FileMaximumInformation, FileDirectoryInformation = 1, FileDirectoryInformation = 1, FileFullDirectoryInformation,
  FileBothDirectoryInformation, FileBasicInformation, FileStandardInformation, FileInternalInformation,
  FileEaInformation, FileAccessInformation, FileNameInformation, FileRenameInformation,
  FileLinkInformation, FileNamesInformation, FileDispositionInformation, FilePositionInformation,
  FileFullEaInformation, FileModeInformation, FileAlignmentInformation, FileAllInformation,
  FileAllocationInformation, FileEndOfFileInformation, FileAlternateNameInformation, FileStreamInformation,
  FilePipeInformation, FilePipeLocalInformation, FilePipeRemoteInformation, FileMailslotQueryInformation,
  FileMailslotSetInformation, FileCompressionInformation, FileObjectIdInformation, FileCompletionInformation,
  FileMoveClusterInformation, FileQuotaInformation, FileReparsePointInformation, FileNetworkOpenInformation,
  FileAttributeTagInformation, FileTrackingInformation, FileIdBothDirectoryInformation, FileIdFullDirectoryInformation,
  FileValidDataLengthInformation, FileShortNameInformation, FileIoCompletionNotificationInformation, FileIoStatusBlockRangeInformation,
  FileIoPriorityHintInformation, FileSfioReserveInformation, FileSfioVolumeInformation, FileHardLinkInformation,
  FileProcessIdsUsingFileInformation, FileNormalizedNameInformation, FileNetworkPhysicalNameInformation, FileIdGlobalTxDirectoryInformation,
  FileIsRemoteDeviceInformation, FileAttributeCacheInformation, FileNumaNodeInformation, FileStandardLinkInformation,
  FileRemoteProtocolInformation, FileRenameInformationBypassAccessCheck, FileLinkInformationBypassAccessCheck, FileVolumeNameInformation,
  FileIdInformation, FileIdExtdDirectoryInformation, FileReplaceCompletionInformation, FileHardLinkFullIdInformation,
  FileIdExtdBothDirectoryInformation, FileMaximumInformation, FileDirectoryInformation = 1, FileFullDirectoryInformation,
  FileBothDirectoryInformation, FileBasicInformation, FileStandardInformation, FileInternalInformation,
  FileEaInformation, FileAccessInformation, FileNameInformation, FileRenameInformation,
  FileLinkInformation, FileNamesInformation, FileDispositionInformation, FilePositionInformation,
  FileFullEaInformation, FileModeInformation, FileAlignmentInformation, FileAllInformation,
  FileAllocationInformation, FileEndOfFileInformation, FileAlternateNameInformation, FileStreamInformation,
  FilePipeInformation, FilePipeLocalInformation, FilePipeRemoteInformation, FileMailslotQueryInformation,
  FileMailslotSetInformation, FileCompressionInformation, FileObjectIdInformation, FileCompletionInformation,
  FileMoveClusterInformation, FileQuotaInformation, FileReparsePointInformation, FileNetworkOpenInformation,
  FileAttributeTagInformation, FileTrackingInformation, FileIdBothDirectoryInformation, FileIdFullDirectoryInformation,
  FileValidDataLengthInformation, FileShortNameInformation, FileIoCompletionNotificationInformation, FileIoStatusBlockRangeInformation,
  FileIoPriorityHintInformation, FileSfioReserveInformation, FileSfioVolumeInformation, FileHardLinkInformation,
  FileProcessIdsUsingFileInformation, FileNormalizedNameInformation, FileNetworkPhysicalNameInformation, FileIdGlobalTxDirectoryInformation,
  FileIsRemoteDeviceInformation, FileAttributeCacheInformation, FileNumaNodeInformation, FileStandardLinkInformation,
  FileRemoteProtocolInformation, FileMaximumInformation
}
 
enum  _FSINFOCLASS {
  FileFsVolumeInformation = 1, FileFsLabelInformation, FileFsSizeInformation, FileFsDeviceInformation,
  FileFsAttributeInformation, FileFsControlInformation, FileFsFullSizeInformation, FileFsObjectIdInformation,
  FileFsDriverPathInformation, FileFsVolumeFlagsInformation, FileFsMaximumInformation, FileFsVolumeInformation = 1,
  FileFsLabelInformation, FileFsSizeInformation, FileFsDeviceInformation, FileFsAttributeInformation,
  FileFsControlInformation, FileFsQuotaQueryInformation, FileFsQuotaSetInformation, FileFsMaximumInformation,
  FileFsVolumeInformation = 1, FileFsLabelInformation, FileFsSizeInformation, FileFsDeviceInformation,
  FileFsAttributeInformation, FileFsControlInformation, FileFsFullSizeInformation, FileFsObjectIdInformation,
  FileFsDriverPathInformation, FileFsMaximumInformation, FileFsVolumeInformation = 1, FileFsLabelInformation,
  FileFsSizeInformation, FileFsDeviceInformation, FileFsAttributeInformation, FileFsControlInformation,
  FileFsFullSizeInformation, FileFsObjectIdInformation, FileFsMaximumInformation, FileFsVolumeInformation = 1,
  FileFsLabelInformation, FileFsSizeInformation, FileFsDeviceInformation, FileFsAttributeInformation,
  FileFsControlInformation, FileFsFullSizeInformation, FileFsObjectIdInformation, FileFsDriverPathInformation,
  FileFsVolumeFlagsInformation, FileFsMaximumInformation
}
 
enum  _KEY_INFORMATION_CLASS {
  KeyBasicInformation, KeyNodeInformation, KeyFullInformation, KeyBasicInformation,
  KeyNodeInformation, KeyFullInformation, KeyNameInformation, KeyCachedInformation,
  KeyFlagsInformation, KeyVirtualizationInformation, KeyHandleTagsInformation, MaxKeyInfoClass,
  KeyBasicInformation, KeyNodeInformation, KeyFullInformation, KeyNameInformation,
  KeyCachedInformation, KeyFlagsInformation, KeyVirtualizationInformation, KeyHandleTagsInformation,
  MaxKeyInfoClass
}
 
enum  _KEY_VALUE_INFORMATION_CLASS {
  KeyValueBasicInformation, KeyValueFullInformation, KeyValuePartialInformation, KeyValueBasicInformation,
  KeyValueFullInformation, KeyValuePartialInformation, KeyValueFullInformationAlign64, KeyValuePartialInformationAlign64,
  KeyValueBasicInformation, KeyValueFullInformation, KeyValuePartialInformation, KeyValueFullInformationAlign64,
  KeyValuePartialInformationAlign64, KeyValueBasicInformation, KeyValueFullInformation, KeyValuePartialInformation,
  KeyValueFullInformationAlign64, KeyValuePartialInformationAlign64
}
 
enum  _OBJECT_INFORMATION_CLASS {
  ObjectBasicInformation, ObjectNameInformation, ObjectTypeInformation, ObjectAllTypesInformation,
  ObjectHandleInformation, ObjectBasicInformation = 0, ObjectTypeInformation = 2, ObjectBasicInformation,
  ObjectNameInformation, ObjectTypeInformation, ObjectTypesInformation, ObjectDataInformation
}
 
enum  _PROCESSINFOCLASS {
  ProcessBasicInformation = 0, ProcessDebugPort = 7, ProcessWow64Information = 26, ProcessImageFileName = 27,
  ProcessBreakOnTermination = 29, ProcessBasicInformation = 0, ProcessQuotaLimits = 1, ProcessIoCounters = 2,
  ProcessVmCounters = 3, ProcessTimes = 4, ProcessBasePriority = 5, ProcessRaisePriority = 6,
  ProcessDebugPort = 7, ProcessExceptionPort = 8, ProcessAccessToken = 9, ProcessLdtInformation = 10,
  ProcessLdtSize = 11, ProcessDefaultHardErrorMode = 12, ProcessIoPortHandlers = 13, ProcessPooledUsageAndLimits = 14,
  ProcessWorkingSetWatch = 15, ProcessUserModeIOPL = 16, ProcessEnableAlignmentFaultFixup = 17, ProcessPriorityClass = 18,
  ProcessWx86Information = 19, ProcessHandleCount = 20, ProcessAffinityMask = 21, ProcessPriorityBoost = 22,
  ProcessDeviceMap = 23, ProcessSessionInformation = 24, ProcessForegroundInformation = 25, ProcessWow64Information = 26,
  ProcessImageFileName = 27, ProcessLUIDDeviceMapsEnabled = 28, ProcessBreakOnTermination = 29, ProcessDebugObjectHandle = 30,
  ProcessDebugFlags = 31, ProcessHandleTracing = 32, ProcessExecuteFlags = 34, ProcessTlsInformation = 35,
  ProcessCookie = 36, ProcessImageInformation = 37, ProcessCycleTime = 38, ProcessPagePriority = 39,
  ProcessInstrumentationCallback = 40, ProcessThreadStackAllocation = 41, ProcessWorkingSetWatchEx = 42, ProcessImageFileNameWin32 = 43,
  ProcessImageFileMapping = 44, ProcessAffinityUpdateMode = 45, ProcessMemoryAllocationMode = 46, ProcessGroupInformation = 47,
  ProcessTokenVirtualizationEnabled = 48, ProcessConsoleHostProcess = 49, ProcessWindowInformation = 50, MaxProcessInfoClass,
  ProcessBasicInformation, ProcessQuotaLimits, ProcessIoCounters, ProcessVmCounters,
  ProcessTimes, ProcessBasePriority, ProcessRaisePriority, ProcessDebugPort,
  ProcessExceptionPort, ProcessAccessToken, ProcessLdtInformation, ProcessLdtSize,
  ProcessDefaultHardErrorMode, ProcessIoPortHandlers, ProcessPooledUsageAndLimits, ProcessWorkingSetWatch,
  ProcessUserModeIOPL, ProcessEnableAlignmentFaultFixup, ProcessPriorityClass, ProcessWx86Information,
  ProcessHandleCount, ProcessAffinityMask, ProcessPriorityBoost, ProcessDeviceMap,
  ProcessSessionInformation, ProcessForegroundInformation, ProcessWow64Information, ProcessImageFileName,
  ProcessLUIDDeviceMapsEnabled, ProcessBreakOnTermination, ProcessDebugObjectHandle, ProcessDebugFlags,
  ProcessHandleTracing, ProcessIoPriority, ProcessExecuteFlags, ProcessTlsInformation,
  ProcessCookie, ProcessImageInformation, ProcessCycleTime, ProcessPagePriority,
  ProcessInstrumentationCallback, ProcessThreadStackAllocation, ProcessWorkingSetWatchEx, ProcessImageFileNameWin32,
  ProcessImageFileMapping, ProcessAffinityUpdateMode, ProcessMemoryAllocationMode, ProcessGroupInformation,
  ProcessTokenVirtualizationEnabled, ProcessConsoleHostProcess, ProcessWindowInformation, MaxProcessInfoClass
}
 
enum  _SECTION_INHERIT {
  ViewShare = 1, ViewUnmap = 2, ViewShare = 1, ViewUnmap = 2,
  ViewShare = 1, ViewUnmap = 2
}
 
enum  _SYSTEM_INFORMATION_CLASS {
  SystemBasicInformation, SystemProcessorInformation, SystemPerformanceInformation, SystemTimeOfDayInformation,
  SystemPathInformation, SystemProcessInformation, SystemCallCountInformation, SystemDeviceInformation,
  SystemProcessorPerformanceInformation, SystemFlagsInformation, SystemCallTimeInformation, SystemModuleInformation,
  SystemLocksInformation, SystemStackTraceInformation, SystemPagedPoolInformation, SystemNonPagedPoolInformation,
  SystemHandleInformation, SystemObjectInformation, SystemPageFileInformation, SystemVdmInstemulInformation,
  SystemVdmBopInformation, SystemFileCacheInformation, SystemPoolTagInformation, SystemInterruptInformation,
  SystemDpcBehaviorInformation, SystemFullMemoryInformation, SystemLoadGdiDriverInformation, SystemUnloadGdiDriverInformation,
  SystemTimeAdjustmentInformation, SystemSummaryMemoryInformation, SystemNextEventIdInformation, SystemEventIdsInformation,
  SystemCrashDumpInformation, SystemExceptionInformation, SystemCrashDumpStateInformation, SystemKernelDebuggerInformation,
  SystemContextSwitchInformation, SystemRegistryQuotaInformation, SystemExtendServiceTableInformation, SystemPrioritySeperation,
  SystemPlugPlayBusInformation, SystemDockInformation, SystemPowerInformation, SystemProcessorSpeedInformation,
  SystemCurrentTimeZoneInformation, SystemLookasideInformation, SystemBasicInformation, SystemProcessorInformation,
  SystemPerformanceInformation, SystemTimeOfDayInformation, SystemPathInformation, SystemProcessInformation,
  SystemCallCountInformation, SystemDeviceInformation, SystemProcessorPerformanceInformation, SystemFlagsInformation,
  SystemCallTimeInformation, SystemModuleInformation, SystemLocksInformation, SystemStackTraceInformation,
  SystemPagedPoolInformation, SystemNonPagedPoolInformation, SystemHandleInformation, SystemObjectInformation,
  SystemPageFileInformation, SystemVdmInstemulInformation, SystemVdmBopInformation, SystemFileCacheInformation,
  SystemPoolTagInformation, SystemInterruptInformation, SystemDpcBehaviorInformation, SystemFullMemoryInformation,
  SystemLoadGdiDriverInformation, SystemUnloadGdiDriverInformation, SystemTimeAdjustmentInformation, SystemSummaryMemoryInformation,
  SystemNextEventIdInformation, SystemEventIdsInformation, SystemCrashDumpInformation, SystemExceptionInformation,
  SystemCrashDumpStateInformation, SystemKernelDebuggerInformation, SystemContextSwitchInformation, SystemRegistryQuotaInformation,
  SystemExtendServiceTableInformation, SystemPrioritySeperation, SystemPlugPlayBusInformation, SystemDockInformation,
  SystemPowerInformation, SystemProcessorSpeedInformation, SystemCurrentTimeZoneInformation, SystemLookasideInformation,
  SystemBasicInformation, SystemProcessorInformation, SystemPerformanceInformation, SystemTimeOfDayInformation,
  SystemPathInformation, SystemProcessInformation, SystemCallCountInformation, SystemDeviceInformation,
  SystemProcessorPerformanceInformation, SystemFlagsInformation, SystemCallTimeInformation, SystemModuleInformation,
  SystemLocksInformation, SystemStackTraceInformation, SystemPagedPoolInformation, SystemNonPagedPoolInformation,
  SystemHandleInformation, SystemObjectInformation, SystemPageFileInformation, SystemVdmInstemulInformation,
  SystemVdmBopInformation, SystemFileCacheInformation, SystemPoolTagInformation, SystemInterruptInformation,
  SystemDpcBehaviorInformation, SystemFullMemoryInformation, SystemLoadGdiDriverInformation, SystemUnloadGdiDriverInformation,
  SystemTimeAdjustmentInformation, SystemSummaryMemoryInformation, SystemMirrorMemoryInformation, SystemPerformanceTraceInformation,
  SystemObsolete0, SystemExceptionInformation, SystemCrashDumpStateInformation, SystemKernelDebuggerInformation,
  SystemContextSwitchInformation, SystemRegistryQuotaInformation, SystemExtendServiceTableInformation, SystemPrioritySeperation,
  SystemPlugPlayBusInformation, SystemDockInformation, SystemPowerInformationNative, SystemProcessorSpeedInformation,
  SystemCurrentTimeZoneInformation, SystemLookasideInformation, SystemTimeSlipNotification, SystemSessionCreate,
  SystemSessionDetach, SystemSessionInformation, SystemRangeStartInformation, SystemVerifierInformation,
  SystemAddVerifier, SystemSessionProcessesInformation, SystemLoadGdiDriverInSystemSpaceInformation, SystemNumaProcessorMap,
  SystemPrefetcherInformation, SystemExtendedProcessInformation, SystemRecommendedSharedDataAlignment, SystemComPlusPackage,
  SystemNumaAvailableMemory, SystemProcessorPowerInformation, SystemEmulationBasicInformation, SystemEmulationProcessorInformation,
  SystemExtendedHandleInformation, SystemLostDelayedWriteInformation, SystemBigPoolInformation, SystemSessionPoolTagInformation,
  SystemSessionMappedViewInformation, SystemHotpatchInformation, SystemObjectSecurityMode, SystemWatchDogTimerHandler,
  SystemWatchDogTimerInformation, SystemLogicalProcessorInformation, SystemWow64SharedInformationObsolete, SystemRegisterFirmwareTableInformationHandler,
  SystemFirmwareTableInformation, SystemModuleInformationEx, SystemVerifierTriageInformation, SystemSuperfetchInformation,
  SystemMemoryListInformation, SystemFileCacheInformationEx, SystemThreadPriorityClientIdInformation, SystemProcessorIdleCycleTimeInformation,
  SystemVerifierCancellationInformation, SystemProcessorPowerInformationEx, SystemRefTraceInformation, SystemSpecialPoolInformation,
  SystemProcessIdInformation, SystemErrorPortInformation, SystemBootEnvironmentInformation, SystemHypervisorInformation,
  SystemVerifierInformationEx, SystemTimeZoneInformation, SystemImageFileExecutionOptionsInformation, SystemCoverageInformation,
  SystemPrefetchPathInformation, SystemVerifierFaultsInformation, MaxSystemInfoClass, SystemBasicInformation = 0,
  SystemPerformanceInformation = 2, SystemTimeOfDayInformation = 3, SystemProcessInformation = 5, SystemProcessorPerformanceInformation = 8,
  SystemInterruptInformation = 23, SystemExceptionInformation = 33, SystemRegistryQuotaInformation = 37, SystemLookasideInformation = 45,
  SystemPolicyInformation = 134, SystemBasicInformation = 0, SystemCpuInformation = 1, SystemPerformanceInformation = 2,
  SystemTimeOfDayInformation = 3, Unknown4, SystemProcessInformation = 5, Unknown6,
  Unknown7, SystemProcessorPerformanceInformation = 8, Unknown9, Unknown10,
  SystemModuleInformation = 11, Unknown12, Unknown13, Unknown14,
  Unknown15, SystemHandleInformation = 16, Unknown17, SystemPageFileInformation = 18,
  Unknown19, Unknown20, SystemCacheInformation = 21, Unknown22,
  SystemInterruptInformation = 23, SystemDpcBehaviourInformation = 24, SystemFullMemoryInformation = 25, SystemNotImplemented6 = 25,
  SystemLoadImage = 26, SystemUnloadImage = 27, SystemTimeAdjustmentInformation = 28, SystemTimeAdjustment = 28,
  SystemSummaryMemoryInformation = 29, SystemNotImplemented7 = 29, SystemNextEventIdInformation = 30, SystemNotImplemented8 = 30,
  SystemEventIdsInformation = 31, SystemCrashDumpInformation = 32, SystemExceptionInformation = 33, SystemCrashDumpStateInformation = 34,
  SystemKernelDebuggerInformation = 35, SystemContextSwitchInformation = 36, SystemRegistryQuotaInformation = 37, SystemCurrentTimeZoneInformation = 44,
  SystemTimeZoneInformation = 44, SystemLookasideInformation = 45, SystemSetTimeSlipEvent = 46, SystemCreateSession = 47,
  SystemDeleteSession = 48, SystemInvalidInfoClass4 = 49, SystemRangeStartInformation = 50, SystemVerifierInformation = 51,
  SystemAddVerifier = 52, SystemSessionProcessesInformation = 53, SystemLoadGdiDriverInSystemSpace = 54, SystemNumaProcessorMap = 55,
  SystemPrefetcherInformation = 56, SystemExtendedProcessInformation = 57, SystemRecommendedSharedDataAlignment = 58, SystemComPlusPackage = 59,
  SystemNumaAvailableMemory = 60, SystemProcessorPowerInformation = 61, SystemEmulationBasicInformation = 62, SystemEmulationProcessorInformation = 63,
  SystemExtendedHandleInformation = 64, SystemLostDelayedWriteInformation = 65, SystemBigPoolInformation = 66, SystemSessionPoolTagInformation = 67,
  SystemSessionMappedViewInformation = 68, SystemHotpatchInformation = 69, SystemObjectSecurityMode = 70, SystemWatchdogTimerHandler = 71,
  SystemWatchdogTimerInformation = 72, SystemLogicalProcessorInformation = 73, SystemWow64SharedInformation = 74, SystemRegisterFirmwareTableInformationHandler = 75,
  SystemFirmwareTableInformation = 76, SystemModuleInformationEx = 77, SystemVerifierTriageInformation = 78, SystemSuperfetchInformation = 79,
  SystemMemoryListInformation = 80, SystemFileCacheInformationEx = 81, SystemLogicalProcessorInformationEx = 107, SystemInformationClassMax
}
 
enum  _THREADINFOCLASS {
  ThreadBasicInformation, ThreadTimes, ThreadPriority, ThreadBasePriority,
  ThreadAffinityMask, ThreadImpersonationToken, ThreadDescriptorTableEntry, ThreadEnableAlignmentFaultFixup,
  ThreadEventPair_Reusable, ThreadQuerySetWin32StartAddress, ThreadZeroTlsCell, ThreadPerformanceCount,
  ThreadAmILastThread, ThreadIdealProcessor, ThreadPriorityBoost, ThreadSetTlsArrayAddress,
  ThreadIsIoPending, ThreadHideFromDebugger, ThreadBreakOnTermination, ThreadSwitchLegacyState,
  ThreadIsTerminated, ThreadLastSystemCall, ThreadIoPriority, ThreadCycleTime,
  ThreadPagePriority, ThreadActualBasePriority, ThreadTebInformation, ThreadCSwitchMon,
  ThreadCSwitchPmu, ThreadWow64Context, ThreadGroupInformation, ThreadUmsInformation,
  ThreadCounterProfiling, ThreadIdealProcessorEx, MaxThreadInfoClass, ThreadIsIoPending = 16,
  ThreadBasicInformation, ThreadTimes, ThreadPriority, ThreadBasePriority,
  ThreadAffinityMask, ThreadImpersonationToken, ThreadDescriptorTableEntry, ThreadEnableAlignmentFaultFixup,
  ThreadEventPair_Reusable, ThreadQuerySetWin32StartAddress, ThreadZeroTlsCell, ThreadPerformanceCount,
  ThreadAmILastThread, ThreadIdealProcessor, ThreadPriorityBoost, ThreadSetTlsArrayAddress,
  ThreadIsIoPending, ThreadHideFromDebugger, ThreadBreakOnTermination, ThreadSwitchLegacyState,
  ThreadIsTerminated, ThreadLastSystemCall, ThreadIoPriority, ThreadCycleTime,
  ThreadPagePriority, ThreadActualBasePriority, ThreadTebInformation, ThreadCSwitchMon,
  ThreadCSwitchPmu, ThreadWow64Context, ThreadGroupInformation, ThreadUmsInformation,
  ThreadCounterProfiling, ThreadIdealProcessorEx, MaxThreadInfoClass, ThreadBasicInformation,
  ThreadTimes, ThreadPriority, ThreadBasePriority, ThreadAffinityMask,
  ThreadImpersonationToken, ThreadDescriptorTableEntry, ThreadEnableAlignmentFaultFixup, ThreadEventPair_Reusable,
  ThreadQuerySetWin32StartAddress, ThreadZeroTlsCell, ThreadPerformanceCount, ThreadAmILastThread,
  ThreadIdealProcessor, ThreadPriorityBoost, ThreadSetTlsArrayAddress, ThreadIsIoPending,
  ThreadHideFromDebugger, ThreadBreakOnTermination, ThreadSwitchLegacyState, ThreadIsTerminated,
  ThreadLastSystemCall, ThreadIoPriority, ThreadCycleTime, ThreadPagePriority,
  ThreadActualBasePriority, ThreadTebInformation, ThreadCSwitchMon, ThreadCSwitchPmu,
  ThreadWow64Context, ThreadGroupInformation, ThreadUmsInformation, ThreadCounterProfiling,
  ThreadIdealProcessorEx, MaxThreadInfoClass
}
 
enum  _WINSTATIONINFOCLASS { WinStationInformation = 8, WinStationInformation = 8 }
 
enum  _MEMORY_INFORMATION_CLASS {
  MemoryBasicInformation, MemoryWorkingSetList, MemorySectionName, MemoryBasicVlmInformation,
  MemoryWorkingSetExList, MemoryBasicInformation, MemoryWorkingSetList, MemorySectionName,
  MemoryBasicVlmInformation
}
 
enum  _MUTANT_INFORMATION_CLASS { MutantBasicInformation, MutantOwnerInformation, MutantBasicInformation }
 
enum  _TIMER_INFORMATION_CLASS { TimerBasicInformation, TimerBasicInformation = 0 }
 
enum  DOS_PATHNAME_TYPE {
  INVALID_PATH = 0, UNC_PATH, ABSOLUTE_DRIVE_PATH, RELATIVE_DRIVE_PATH,
  ABSOLUTE_PATH, RELATIVE_PATH, DEVICE_PATH, UNC_DOT_PATH
}
 
enum  _ATOM_INFORMATION_CLASS { AtomBasicInformation, AtomTableInformation, AtomBasicInformation = 0, AtomTableInformation = 1 }
 
enum  _EVENT_INFORMATION_CLASS { EventBasicInformation, EventBasicInformation }
 
enum  _SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation, SemaphoreBasicInformation }
 
enum  _SECTION_INFORMATION_CLASS { SectionBasicInformation, SectionImageInformation, SectionBasicInformation, SectionImageInformation }
 
enum  _SHUTDOWN_ACTION {
  ShutdownNoReboot, ShutdownReboot, ShutdownPowerOff, ShutdownNoReboot,
  ShutdownReboot, ShutdownPowerOff, ShutdownNoReboot, ShutdownReboot,
  ShutdownPowerOff
}
 
enum  _KPROFILE_SOURCE {
  ProfileTime, ProfileAlignmentFixup, ProfileTotalIssues, ProfilePipelineDry,
  ProfileLoadInstructions, ProfilePipelineFrozen, ProfileBranchInstructions, ProfileTotalNonissues,
  ProfileDcacheMisses, ProfileIcacheMisses, ProfileCacheMisses, ProfileBranchMispredictions,
  ProfileStoreInstructions, ProfileFpInstructions, ProfileIntegerInstructions, Profile2Issue,
  Profile3Issue, Profile4Issue, ProfileSpecialInstructions, ProfileTotalCycles,
  ProfileIcacheIssues, ProfileDcacheAccesses, ProfileMemoryBarrierCycles, ProfileLoadLinkedIssues,
  ProfileMaximum, ProfileTime, ProfileAlignmentFixup, ProfileTotalIssues,
  ProfilePipelineDry, ProfileLoadInstructions, ProfilePipelineFrozen, ProfileBranchInstructions,
  ProfileTotalNonissues, ProfileDcacheMisses, ProfileIcacheMisses, ProfileCacheMisses,
  ProfileBranchMispredictions, ProfileStoreInstructions, ProfileFpInstructions, ProfileIntegerInstructions,
  Profile2Issue, Profile3Issue, Profile4Issue, ProfileSpecialInstructions,
  ProfileTotalCycles, ProfileIcacheIssues, ProfileDcacheAccesses, ProfileMemoryBarrierCycles,
  ProfileLoadLinkedIssues, ProfileMaximum
}
 
enum  _PORT_INFORMATION_CLASS { PortNoInformation, PortNoInformation }
 
enum  _IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation, IoCompletionBasicInformation }
 
enum  _HARDERROR_RESPONSE_OPTION {
  OptionAbortRetryIgnore, OptionOk, OptionOkCancel, OptionRetryCancel,
  OptionYesNo, OptionYesNoCancel, OptionShutdownSystem, OptionOkNoWait,
  OptionCancelTryContinue, OptionAbortRetryIgnore, OptionOk, OptionOkCancel,
  OptionRetryCancel, OptionYesNo, OptionYesNoCancel, OptionShutdownSystem
}
 
enum  _HARDERROR_RESPONSE {
  ResponseReturnToCaller, ResponseNotHandled, ResponseAbort, ResponseCancel,
  ResponseIgnore, ResponseNo, ResponseOk, ResponseRetry,
  ResponseYes, ResponseTryAgain, ResponseContinue, ResponseReturnToCaller,
  ResponseNotHandled, ResponseAbort, ResponseCancel, ResponseIgnore,
  ResponseNo, ResponseOk, ResponseRetry, ResponseYes
}
 
enum  _SYSDBG_COMMAND {
  SysDbgQueryModuleInformation = 0, SysDbgQueryTraceInformation = 1, SysDbgSetTracepoint = 2, SysDbgSetSpecialCall = 3,
  SysDbgClearSpecialCalls = 4, SysDbgQuerySpecialCalls = 5, SysDbgBreakPoint = 6, SysDbgQueryVersion = 7,
  SysDbgReadVirtual = 8, SysDbgWriteVirtual = 9, SysDbgReadPhysical = 10, SysDbgWritePhysical = 11,
  SysDbgReadControlSpace = 12, SysDbgWriteControlSpace = 13, SysDbgReadIoSpace = 14, SysDbgWriteIoSpace = 15,
  SysDbgReadMsr = 16, SysDbgWriteMsr = 17, SysDbgReadBusData = 18, SysDbgWriteBusData = 19,
  SysDbgCheckLowMemory = 20, SysDbgEnableKernelDebugger = 21, SysDbgDisableKernelDebugger = 22, SysDbgGetAutoKdEnable = 23,
  SysDbgSetAutoKdEnable = 24, SysDbgGetPrintBufferSize = 25, SysDbgSetPrintBufferSize = 26, SysDbgGetKdUmExceptionEnable = 27,
  SysDbgSetKdUmExceptionEnable = 28, SysDbgGetTriageDump = 29, SysDbgGetKdBlockEnable = 30, SysDbgSetKdBlockEnable = 31,
  SysDbgRegisterForUmBreakInfo = 32, SysDbgGetUmBreakPid = 33, SysDbgClearUmBreakPid = 34, SysDbgGetUmAttachPid = 35,
  SysDbgClearUmAttachPid = 36, SysDbgQueryModuleInformation, SysDbgQueryTraceInformation, SysDbgSetTracepoint,
  SysDbgSetSpecialCall, SysDbgClearSpecialCalls, SysDbgQuerySpecialCalls, SysDbgBreakPoint,
  SysDbgQueryVersion, SysDbgReadVirtual, SysDbgWriteVirtual, SysDbgReadPhysical,
  SysDbgWritePhysical, SysDbgReadControlSpace, SysDbgWriteControlSpace, SysDbgReadIoSpace,
  SysDbgWriteIoSpace, SysDbgReadMsr, SysDbgWriteMsr, SysDbgReadBusData,
  SysDbgWriteBusData
}
 

Functions

typedef VOID (CALLBACK *PTIMER_APC_ROUTINE)(PVOID
 
NTSYSAPI void WINAPI DbgBreakPoint (void)
 
NTSYSAPI void WINAPI DbgUserBreakPoint (void)
 
NTSYSAPI NTSTATUS WINAPIV DbgPrint (LPCSTR fmt,...)
 
NTSYSAPI NTSTATUS WINAPIV DbgPrintEx (ULONG iComponentId, ULONG Level, LPCSTR fmt,...)
 
NTSYSAPI NTSTATUS WINAPI LdrAccessResource (HMODULE, const IMAGE_RESOURCE_DATA_ENTRY *, void **, PULONG)
 
NTSYSAPI NTSTATUS WINAPI LdrAddRefDll (ULONG, HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DIRECTORY **)
 
NTSYSAPI NTSTATUS WINAPI LdrFindResource_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DATA_ENTRY **)
 
NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll (HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress (const void *, PLDR_MODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle (LPCWSTR, ULONG, const UNICODE_STRING *, HMODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress (HMODULE, const ANSI_STRING *, ULONG, void **)
 
NTSYSAPI void WINAPI LdrInitializeThunk (void *, ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI LdrLoadDll (LPCWSTR, DWORD, const UNICODE_STRING *, HMODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock (ULONG, ULONG *, ULONG_PTR *)
 
IMAGE_BASE_RELOCATION *WINAPI LdrProcessRelocationBlock (void *, UINT, USHORT *, INT_PTR)
 
NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions (const UNICODE_STRING *, LPCWSTR, ULONG, void *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation (SYSTEM_MODULE_INFORMATION *, ULONG, ULONG *)
 
NTSYSAPI void WINAPI LdrShutdownProcess (void)
 
NTSYSAPI void WINAPI LdrShutdownThread (void)
 
NTSYSAPI NTSTATUS WINAPI LdrUnloadDll (HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock (ULONG, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort (PHANDLE, ULONG, PLPC_MESSAGE, BOOLEAN, PLPC_SECTION_WRITE, PLPC_SECTION_READ)
 
NTSYSAPI NTSTATUS WINAPI NtAccessCheck (PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, PGENERIC_MAPPING, PPRIVILEGE_SET, PULONG, PULONG, NTSTATUS *)
 
NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm (PUNICODE_STRING, HANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, ACCESS_MASK, PGENERIC_MAPPING, BOOLEAN, PACCESS_MASK, PBOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtAddAtom (const WCHAR *, ULONG, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken (HANDLE, BOOLEAN, PTOKEN_GROUPS, ULONG, PTOKEN_GROUPS, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken (HANDLE, BOOLEAN, PTOKEN_PRIVILEGES, DWORD, PTOKEN_PRIVILEGES, PDWORD)
 
NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAlertThread (HANDLE ThreadHandle)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId (PLUID lpLuid)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateUuids (PULARGE_INTEGER, PULONG, PULONG, PUCHAR)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory (HANDLE, PVOID *, ULONG, SIZE_T *, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame (PVOID, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCallbackReturn (PVOID, ULONG, NTSTATUS)
 
NTSYSAPI NTSTATUS WINAPI NtCancelIoFile (HANDLE, PIO_STATUS_BLOCK)
 
NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx (HANDLE, PIO_STATUS_BLOCK, PIO_STATUS_BLOCK)
 
NTSYSAPI NTSTATUS WINAPI NtCancelTimer (HANDLE, BOOLEAN *)
 
NTSYSAPI NTSTATUS WINAPI NtClearEvent (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtClose (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm (PUNICODE_STRING, HANDLE, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtContinue (PCONTEXT, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtCreateEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, EVENT_TYPE, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateEventPair (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtCreateFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, PLARGE_INTEGER, ULONG, ULONG, ULONG, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateJobObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, HANDLE, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreateMutant (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile (PHANDLE, ULONG, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile (PUNICODE_STRING, PLARGE_INTEGER, PLARGE_INTEGER, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreatePort (PHANDLE, POBJECT_ATTRIBUTES, ULONG, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateProcess (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, BOOLEAN, HANDLE, HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateProfile (PHANDLE, HANDLE, PVOID, ULONG, ULONG, PVOID, ULONG, KPROFILE_SOURCE, KAFFINITY)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const LARGE_INTEGER *, ULONG, ULONG, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, LONG, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtCreateThread (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, PCLIENT_ID, PCONTEXT, PINITIAL_TEB, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, TIMER_TYPE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateToken (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, TOKEN_TYPE, PLUID, PLARGE_INTEGER, PTOKEN_USER, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_OWNER, PTOKEN_PRIMARY_GROUP, PTOKEN_DEFAULT_DACL, PTOKEN_SOURCE)
 
NTSYSAPI NTSTATUS WINAPI NtDelayExecution (BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteAtom (RTL_ATOM)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteFile (POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteKey (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey (HANDLE, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtDisplayString (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtDuplicateObject (HANDLE, HANDLE, HANDLE, PHANDLE, ACCESS_MASK, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtDuplicateToken (HANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, SECURITY_IMPERSONATION_LEVEL, TOKEN_TYPE, PHANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtEnumerateKey (HANDLE, ULONG, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey (HANDLE, ULONG, KEY_VALUE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtExtendSection (HANDLE, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtFilterToken (HANDLE, ULONG, TOKEN_GROUPS *, TOKEN_PRIVILEGES *, TOKEN_GROUPS *, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtFindAtom (const WCHAR *, ULONG, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile (HANDLE, IO_STATUS_BLOCK *)
 
NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache (HANDLE, LPCVOID, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtFlushKey (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory (HANDLE, LPCVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtFsControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtGetContextThread (HANDLE, CONTEXT *)
 
NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber (void)
 
NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent (ULONG, ULONG, PVOID, ULONG)
 
NTSYSAPI ULONG WINAPI NtGetTickCount (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch (HANDLE, ULONG, PVOID, SIZE_T, PVOID *, ULONG_PTR *, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort (HANDLE, PPORT_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateThread (HANDLE, HANDLE, PSECURITY_QUALITY_OF_SERVICE)
 
NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry (BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction (POWER_ACTION, SYSTEM_POWER_STATE, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtListenPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtLoadDriver (const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtLoadKey (const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtLockFile (HANDLE, HANDLE, PIO_APC_ROUTINE, void *, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, ULONG *, BOOLEAN, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection (HANDLE, HANDLE, PVOID *, ULONG, SIZE_T, const LARGE_INTEGER *, SIZE_T *, SECTION_INHERIT, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys (HANDLE, ULONG, OBJECT_ATTRIBUTES *, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenEventPair (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenJobObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenMutant (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm (PUNICODE_STRING, PHANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, ACCESS_MASK, PPRIVILEGE_SET, BOOLEAN, BOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcess (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken (HANDLE, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx (HANDLE, DWORD, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThread (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken (HANDLE, DWORD, BOOLEAN, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx (HANDLE, DWORD, BOOLEAN, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtPowerInformation (POWER_INFORMATION_LEVEL, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck (HANDLE, PPRIVILEGE_SET, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm (PUNICODE_STRING, HANDLE, HANDLE, ULONG, PPRIVILEGE_SET, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm (PUNICODE_STRING, PUNICODE_STRING, HANDLE, PPRIVILEGE_SET, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtPulseEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueueApcThread (HANDLE, PNTAPCFUNC, ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile (const OBJECT_ATTRIBUTES *, FILE_BASIC_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale (BOOLEAN, LCID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage (LANGID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS, BOOLEAN, PUNICODE_STRING, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject (HANDLE, PDIRECTORY_BASIC_INFORMATION, ULONG, BOOLEAN, BOOLEAN, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, BOOLEAN, PVOID, ULONG, PULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtQueryEvent (HANDLE, EVENT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile (const OBJECT_ATTRIBUTES *, FILE_NETWORK_OPEN_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom (RTL_ATOM, ATOM_INFORMATION_CLASS, PVOID, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, LONG, FILE_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject (HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort (HANDLE, PORT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess (HANDLE, PROCESSINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread (HANDLE, THREADINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken (HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage (LANGID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile (KPROFILE_SOURCE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion (HANDLE, IO_COMPLETION_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryKey (HANDLE, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey (HANDLE, PKEY_MULTIPLE_VALUE_INFORMATION, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryMutant (HANDLE, MUTANT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys (POBJECT_ATTRIBUTES, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter (PLARGE_INTEGER, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySection (HANDLE, SECTION_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore (HANDLE, SEMAPHORE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject (HANDLE, PUNICODE_STRING, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue (PUNICODE_STRING, PWCHAR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx (SYSTEM_INFORMATION_CLASS, void *, ULONG, void *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime (PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtQueryTimer (HANDLE, TIMER_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution (PULONG, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryValueKey (HANDLE, const UNICODE_STRING *, KEY_VALUE_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue (const UNICODE_STRING *, ULONG *, PVOID, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory (HANDLE, LPCVOID, MEMORY_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtRaiseException (PEXCEPTION_RECORD, PCONTEXT, BOOL)
 
NTSYSAPI NTSTATUS WINAPI NtRaiseHardError (NTSTATUS, ULONG, PUNICODE_STRING, PVOID *, HARDERROR_RESPONSE_OPTION, PHARDERROR_RESPONSE)
 
NTSYSAPI NTSTATUS WINAPI NtReadFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadFileScatter (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory (HANDLE, const void *, void *, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent (HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseMutant (HANDLE, PLONG)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore (HANDLE, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion (HANDLE, PULONG_PTR, PULONG_PTR, PIO_STATUS_BLOCK, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtRenameKey (HANDLE, UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtReplaceKey (POBJECT_ATTRIBUTES, HANDLE, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtReplyPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort (HANDLE, PULONG, PLPC_MESSAGE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx (HANDLE, PVOID *, PPORT_MESSAGE, PPORT_MESSAGE, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtRequestPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort (HANDLE, PLPC_MESSAGE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtResetEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch (HANDLE, PVOID, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtRestoreKey (HANDLE, HANDLE, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtResumeThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSaveKey (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PSID, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetContextThread (HANDLE, const CONTEXT *)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale (BOOLEAN, LCID)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage (LANGID)
 
NTSYSAPI NTSTATUS WINAPI NtSetEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject (HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationKey (HANDLE, const int, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess (HANDLE, PROCESS_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationThread (HANDLE, THREADINFOCLASS, LPCVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationToken (HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile (ULONG, KPROFILE_SOURCE)
 
NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion (HANDLE, ULONG_PTR, ULONG_PTR, NTSTATUS, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries (ULONG, ULONG, ULONG, ULONG, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue (PUNICODE_STRING, PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState (POWER_ACTION, SYSTEM_POWER_STATE, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemTime (const LARGE_INTEGER *, LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtSetTimer (HANDLE, const LARGE_INTEGER *, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN *)
 
NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution (ULONG, BOOLEAN, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetValueKey (HANDLE, const UNICODE_STRING *, ULONG, ULONG, const void *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject (HANDLE, HANDLE, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtShutdownSystem (SHUTDOWN_ACTION)
 
NTSYSAPI NTSTATUS WINAPI NtStartProfile (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtStopProfile (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSuspendThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl (SYSDBG_COMMAND, PVOID, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject (HANDLE, NTSTATUS)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateProcess (HANDLE, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateThread (HANDLE, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtTestAlert (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadDriver (const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadKey (POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx (POBJECT_ATTRIBUTES, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtUnlockFile (HANDLE, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection (HANDLE, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtVdmControl (ULONG, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent (HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject (HANDLE, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects (ULONG, const HANDLE *, BOOLEAN, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtWriteFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, const void *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteFileGather (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory (HANDLE, void *, const void *, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtYieldExecution (void)
 
NTSYSAPI void WINAPI RtlAcquirePebLock (void)
 
NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive (LPRTL_RWLOCK, BYTE)
 
NTSYSAPI BYTE WINAPI RtlAcquireResourceShared (LPRTL_RWLOCK, BYTE)
 
NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive (RTL_SRWLOCK *)
 
NTSYSAPI void WINAPI RtlAcquireSRWLockShared (RTL_SRWLOCK *)
 
NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext (DWORD, HANDLE, ULONG_PTR *)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAce (PACL, DWORD, DWORD, PACE_HEADER, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce (PACL, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx (PACL, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce (PACL, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx (PACL, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable (RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce (PACL, DWORD, DWORD, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx (PACL, DWORD, DWORD, DWORD, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce (PACL, DWORD, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI void WINAPI RtlAddRefActivationContext (HANDLE)
 
NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler (ULONG, PVECTORED_EXCEPTION_HANDLER)
 
NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege (ULONG, BOOLEAN, BOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid (PSID_IDENTIFIER_AUTHORITY, BYTE, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, PSID *)
 
NTSYSAPI RTL_HANDLE *WINAPI RtlAllocateHandle (RTL_HANDLE_TABLE *, ULONG *)
 
NTSYSAPI PVOID WINAPI RtlAllocateHeap (HANDLE, ULONG, SIZE_T) __WINE_ALLOC_SIZE(3)
 
NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar (LPSTR *)
 
NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize (const STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString (PUNICODE_STRING, PCANSI_STRING, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString (STRING *, LPCSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString (STRING *, const STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString (UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString (UNICODE_STRING *, LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted (ACCESS_MASK, ACCESS_MASK)
 
NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted (ACCESS_MASK, ACCESS_MASK)
 
NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCharToInteger (PCSZ, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey (ULONG, PWSTR)
 
NTSYSAPI void WINAPI RtlClearAllBits (PRTL_BITMAP)
 
NTSYSAPI void WINAPI RtlClearBits (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext (HANDLE *, const void *)
 
NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer (ULONG, BOOLEAN)
 
NTSYSAPI ULONG WINAPI RtlCompactHeap (HANDLE, ULONG)
 
NTSYSAPI LONG WINAPI RtlCompareString (const STRING *, const STRING *, BOOLEAN)
 
NTSYSAPI LONG WINAPI RtlCompareUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings (const WCHAR *, SIZE_T, const WCHAR *, SIZE_T, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer (USHORT, PUCHAR, ULONG, PUCHAR, ULONG, ULONG, PULONG, PVOID)
 
NTSYSAPI DWORD WINAPI RtlComputeCrc32 (DWORD, const BYTE *, INT)
 
NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString (PUNICODE_STRING, PSID, BOOLEAN)
 
NTSYSAPI void WINAPI RtlCopyLuid (PLUID, const LUID *)
 
NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray (ULONG, const LUID_AND_ATTRIBUTES *, PLUID_AND_ATTRIBUTES)
 
NTSYSAPI BOOLEAN WINAPI RtlCopySid (DWORD, PSID, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR)
 
NTSYSAPI void WINAPI RtlCopyString (STRING *, const STRING *)
 
NTSYSAPI void WINAPI RtlCopyUnicodeString (UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateAcl (PACL, DWORD, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable (ULONG, RTL_ATOM_TABLE *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment (BOOLEAN, PWSTR *)
 
NTSYSAPI HANDLE WINAPI RtlCreateHeap (ULONG, PVOID, SIZE_T, SIZE_T, PVOID, PRTL_HEAP_DEFINITION)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters (RTL_USER_PROCESS_PARAMETERS **, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, PWSTR, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue (PHANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateTimer (PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG)
 
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString (PUNICODE_STRING, LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz (PUNICODE_STRING, LPCSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess (UNICODE_STRING *, ULONG, RTL_USER_PROCESS_PARAMETERS *, SECURITY_DESCRIPTOR *, SECURITY_DESCRIPTOR *, HANDLE, BOOLEAN, HANDLE, HANDLE, RTL_USER_PROCESS_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread (HANDLE, const SECURITY_DESCRIPTOR *, BOOLEAN, PVOID, SIZE_T, SIZE_T, PRTL_THREAD_START_ROUTINE, void *, HANDLE *, CLIENT_ID *)
 
NTSYSAPI void WINAPI RtlDeactivateActivationContext (DWORD, ULONG_PTR)
 
NTSYSAPI PVOID WINAPI RtlDecodePointer (PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer (USHORT, PUCHAR, ULONG, PUCHAR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteAce (PACL, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable (RTL_ATOM_TABLE, RTL_ATOM)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection (RTL_CRITICAL_SECTION *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue (ULONG, PCWSTR, PCWSTR)
 
NTSYSAPI void WINAPI RtlDeleteResource (LPRTL_RWLOCK)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject (PSECURITY_DESCRIPTOR *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer (HANDLE, HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx (HANDLE, HANDLE)
 
NTSYSAPI
PRTL_USER_PROCESS_PARAMETERS
WINAPI 
RtlDeNormalizeProcessParams (RTL_USER_PROCESS_PARAMETERS *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable (RTL_ATOM_TABLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment (PWSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable (RTL_HANDLE_TABLE *)
 
NTSYSAPI HANDLE WINAPI RtlDestroyHeap (HANDLE)
 
NTSYSAPI void WINAPI RtlDestroyProcessParameters (RTL_USER_PROCESS_PARAMETERS *)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer (PDEBUG_BUFFER)
 
NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U (PCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress (void)
 
NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U (LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U (PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
 
NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus (PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
 
NTSYSAPI ULONG WINAPI RtlDosSearchPath_U (LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR *)
 
NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar (WCHAR)
 
NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString (UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI void WINAPI RtlDumpResource (LPRTL_RWLOCK)
 
NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString (int, const UNICODE_STRING *, UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable (RTL_ATOM_TABLE, BOOLEAN)
 
NTSYSAPI PVOID WINAPI RtlEncodePointer (PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection (RTL_CRITICAL_SECTION *)
 
NTSYSAPI void WINAPI RtlEraseUnicodeString (UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName (const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName (const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualLuid (const LUID *, const LUID *)
 
NTSYSAPI BOOL WINAPI RtlEqualPrefixSid (PSID, PSID)
 
NTSYSAPI BOOL WINAPI RtlEqualSid (PSID, PSID)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualString (const STRING *, const STRING *, BOOLEAN)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI void
DECLSPEC_NORETURN WINAPI 
RtlExitUserProcess (ULONG)
 
NTSYSAPI void
DECLSPEC_NORETURN WINAPI 
RtlExitUserThread (ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U (PCWSTR, const UNICODE_STRING *, UNICODE_STRING *, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString (ULONG, const GUID *, ULONG, const UNICODE_STRING *, PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid (ULONG, const GUID *, ULONG, const GUID *, PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString (int, const UNICODE_STRING *, const UNICODE_STRING *, USHORT *)
 
NTSYSAPI ULONG WINAPI RtlFindClearBits (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindClearRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN)
 
NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit (ULONGLONG)
 
NTSYSAPI ULONG WINAPI RtlFindLongestRunSet (PCRTL_BITMAP, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindLongestRunClear (PCRTL_BITMAP, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlFindMessage (HMODULE, ULONG, ULONG, ULONG, const MESSAGE_RESOURCE_ENTRY **)
 
NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit (ULONGLONG)
 
NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetBits (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN)
 
NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce (PACL, PACE_HEADER *)
 
NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI RtlFormatMessage (LPWSTR, UCHAR, BOOLEAN, BOOLEAN, BOOLEAN, __ms_va_list *, LPWSTR, ULONG)
 
NTSYSAPI void WINAPI RtlFreeAnsiString (PANSI_STRING)
 
NTSYSAPI BOOLEAN WINAPI RtlFreeHandle (RTL_HANDLE_TABLE *, RTL_HANDLE *)
 
NTSYSAPI BOOLEAN WINAPI RtlFreeHeap (HANDLE, ULONG, PVOID)
 
NTSYSAPI void WINAPI RtlFreeOemString (POEM_STRING)
 
NTSYSAPI DWORD WINAPI RtlFreeSid (PSID)
 
NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack (void)
 
NTSYSAPI void WINAPI RtlFreeUnicodeString (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI RtlGetAce (PACL, DWORD, LPVOID *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext (HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize (USHORT, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL, LPDWORD)
 
NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U (ULONG, LPWSTR)
 
NTSYSAPI PEB *WINAPI RtlGetCurrentPeb (void)
 
NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN)
 
NTSYSAPI TEB_ACTIVE_FRAME *WINAPI RtlGetFrame (void)
 
NTSYSAPI ULONG WINAPI RtlGetFullPathName_U (PCWSTR, ULONG, PWSTR, PWSTR *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus (void)
 
NTSYSAPI DWORD WINAPI RtlGetLastWin32Error (void)
 
NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength (void)
 
NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags (void)
 
NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType (LPDWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN)
 
NTSYSAPI ULONG WINAPI RtlGetProcessHeaps (ULONG, HANDLE *)
 
NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode (void)
 
NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor (PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlGetVersion (RTL_OSVERSIONINFOEXW *)
 
NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString (PUNICODE_STRING, GUID *)
 
NTSYSAPI
PSID_IDENTIFIER_AUTHORITY
WINAPI 
RtlIdentifierAuthoritySid (PSID)
 
NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData (HMODULE, BOOL, WORD, ULONG *)
 
NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader (HMODULE)
 
NTSYSAPI PIMAGE_SECTION_HEADER
WINAPI 
RtlImageRvaToSection (const IMAGE_NT_HEADERS *, HMODULE, DWORD)
 
NTSYSAPI PVOID WINAPI RtlImageRvaToVa (const IMAGE_NT_HEADERS *, HMODULE, DWORD, IMAGE_SECTION_HEADER **)
 
NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf (SECURITY_IMPERSONATION_LEVEL)
 
NTSYSAPI void WINAPI RtlInitString (PSTRING, PCSZ)
 
NTSYSAPI void WINAPI RtlInitAnsiString (PANSI_STRING, PCSZ)
 
NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx (PANSI_STRING, PCSZ)
 
NTSYSAPI void WINAPI RtlInitUnicodeString (PUNICODE_STRING, PCWSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx (PUNICODE_STRING, PCWSTR)
 
NTSYSAPI void WINAPI RtlInitializeBitMap (PRTL_BITMAP, PULONG, ULONG)
 
NTSYSAPI